{
  services.lldap = {
    enable = true;
    settings = {
      http_url = "https://login.distrust.network";
      ldap_user_email = "root@distrust.network";
      ldap_user_dn = "root";
      ldap_base_dn = "dc=distrust,dc=network";
      ldap_user_pass = "VERY_SECURE";
    };
  };

  services.caddy.virtualHosts."login.distrust.network".extraConfig = ''
    reverse_proxy localhost:17170
  '';
}