{
  pkgs,
  inputs,
  config,
  ...
}:
let
  sopsFolder = builtins.toString inputs.nix-secrets + "/sops";
in
{
  disabledModules = [
    "${inputs.nixpkgs}/nixos/modules/services/security/pocket-id.nix"
  ];
  imports = [
    "${inputs.nixpkgs-unstable}/nixos/modules/services/security/pocket-id.nix"
  ];

  services.caddy = {
    enable = true;
    virtualHosts."auth.wanderingcrow.net".extraConfig = ''
      reverse_proxy http://localhost:1411
    '';
  };

  services.pocket-id = {
    enable = true;
    package = pkgs.unstable.pocket-id;
    settings = {
      ANALYTICS_DISABLED = true;
      APP_URL = "https://auth.wanderingcrow.net";
      TRUST_PROXY = true;
    };
  };
}