{config, ...}: let
  kumaPort = 3001;
in {
  age.secrets."hidden_service/uptime-kuma".file = ../../secrets/hidden_service/uptime-kuma;

  services = {
    uptime-kuma = {
      enable = true;
      settings = {
        PORT = toString kumaPort;
      };
    };
    caddy = {
      enable = true;
      virtualHosts."https://status.distrust.network".extraConfig = ''
        reverse_proxy localhost:${toString kumaPort}
      '';
    };
    tor.relay.onionServices."uptime-kuma" = {
      map = [80];
      secretKey = config.age.secrets."hidden_service/uptime-kuma".path;
    };
  };
}