{config, ...}: {
  age.secrets."hidden_service/site" = {
    file = ../secrets/hidden_service/site;
  };

  distrust.services."site" = {
    url = "https://distrust.network";
    onion = {
      url = "http://distrustdtp5qgbk2firlzfkkmu5p6v6acuh2ox454zd2i3ujdqad5yd.onion";
      secretKey = config.age.secrets."hidden_service/site".path;
    };
    virtualHostConfig = ''
      root * /etc/nixos/site
      file_server
    '';
  };
}