{
  config,
  pkgs,
  inputs,
  ...
}:
{
  services.writefreely = {
    enable = true;
    acme.enable = true;
    nginx.enable = true;
    nginx.forceSSL = true;
    host = "blog.lelgenio.com";
    admin.name = "lelgenio";
    admin.initialPasswordFile = config.sops.secrets."writefreely/password".path;
    settings.app = {
      site_name = "Leo's blog";
      single_user = true;
    };
  };

  sops.secrets."writefreely/password" = {
    mode = "400";
    owner = "writefreely";
    group = "writefreely";
  };
}