let
  btcpayPort = 8086;
  onionUrl = "http://yon54asykwaovefzstakipoigbflmfrsw243ezumd7sj4cwtsnjnlyad.onion";
in {
  services = {
    btcpayserver = {
      enable = true;
      port = btcpayPort;
      lightningBackend = "lnd";
    };
    caddy.virtualHosts."https://pay.distrust.network ${onionUrl}".extraConfig = ''
      reverse_proxy localhost:${toString btcpayPort}
    '';
    tor.relay.onionServices."btcpayserver".map = [
      80
    ];
  };
}