{ config, ... }:
{
  sops.secrets."postgres/invidious" = {
    restartUnits = [ "invidious.service" ];
  };

  services.invidious = {
    enable = true;
    domain = "yt.nani.wtf";

    port = 19283;

    database = {
      createLocally = true;
      passwordFile = config.sops.secrets."postgres/invidious".path;
    };

    settings = {
      registration_enabled = false;
      host_binding = "127.0.0.1";

      # popular_enabled = false;
    };
  };

  systemd.services.invidious = {
    requires = [ "postgresql.service" ];
  };
}