{
  config,
  pkgs,
  lib,
  ...
}:
{

  sops.secrets."pangolin/environmentFile" = {
    restartUnits = [ "pangolin.service" ];
    owner = "pangolin";
    mode = "0755";
  };

  users.users.pangolin.extraGroups = [ "acme" ];
  services.pangolin = {
    enable = true;
    openFirewall = true;

    package = pkgs.unstable.fosrl-pangolin;

    baseDomain = "lauterer.it";
    dashboardDomain = "auth.lauterer.it";
    dnsProvider = "domeneshop";

    #settings
    environmentFile = config.sops.secrets."pangolin/environmentFile".path;
    #dataDir
  };

}