{ config, ... }:
let
  kumaPort = 3001;
in {
  age.secrets."hidden_service/uptime-kuma".file = ../../secrets/hidden_service/uptime-kuma;

  services.uptime-kuma = {
    enable = true;
    settings = {
      PORT = kumaPort;
    };
  };

  distrust.services."uptime-kuma" = {
    url = "http://uptime.distrust.network";
    onion = {
      url = "http://dstrst6d56jb7y7bmd77fcq73x43e6euphf74qzjvvn43j67ugydd2id.onion";
      secretKey = config.age.secrets."hidden_service/uptime-kuma".path;
    };
    virtualHostConfig = ''
      reverse_proxy localhost:${toString kumaPort}
    '';
    backup = {
      enable = true;
      paths = [
        "/var/lib/uptime-kuma"
      ];
    };
  };
}