{ config, ... }: { sops.secrets."postgres/invidious" = { restartUnits = [ "invidious.service" ]; }; services.invidious = { enable = true; domain = "yt.nani.wtf"; port = 19283; database = { createLocally = true; passwordFile = config.sops.secrets."postgres/invidious".path; }; settings = { registration_enabled = false; host_binding = "127.0.0.1"; # popular_enabled = false; }; }; systemd.services.invidious = { requires = [ "postgresql.service" ]; }; }