{ lib, ... }:

{
  config = {
    services.vikunja = {
      enable = true;
      frontendScheme = "https";
      frontendHostname = "vikunja.yggdrasil.li";
      settings = {
        service.interface = lib.mkForce "[2a03:4000:52:ada:4:1::]:3456";
        service.enableregistration = false;
      };
      database = {
        host = "/run/postgresql";
        type = "postgres";
      };
    };

    services.postgresql = {
      ensureDatabases = [ "vikunja" ];
      ensureUsers = [
        {
          name = "vikunja";
          ensureDBOwnership = true;
          ensureClauses.login = true;
        }
      ];
    };

    systemd.services.vikunja = {
      serviceConfig = {
        User = "vikunja";
        Group = "vikunja";
      };
    };
  };
}