{
  config,
  pkgs,
  inputs,
  ...
}:
{
  services.mastodon = {
    enable = true;
    configureNginx = true;
    localDomain = "social.lelgenio.com";
    smtp = {
      authenticate = true;
      host = "lelgenio.com";
      fromAddress = "noreply@social.lelgenio.com";
      user = "noreply@social.lelgenio.com";
      passwordFile = config.sops.secrets."mastodon/smtp-password".path;
    };
    streamingProcesses = 2;
    extraConfig.SINGLE_USER_MODE = "true";
    mediaAutoRemove.olderThanDays = 5;
  };

  sops.secrets."mastodon/smtp-password" = {
    mode = "400";
    owner = "mastodon";
  };
}