{pkgs, ...}: {
  environment.etc."testing-keycloak-pass".text = "PWD";
  services.caddy = {
    enable = true;
    virtualHosts."auth.wanderingcrow.net".extraConfig = ''
      reverse_proxy http://localhost:5555
    '';
  };
  services.keycloak = {
    enable = true;
    settings = {
      hostname = "localhost";
      http-port = 5555;
      https-port = 9443;
      http-enabled = true;
      hostname-strict-https = false;
    };
    database = {
      type = "postgresql";
      createLocally = true;
      passwordFile = "/etc/testing-keycloak-pass";
    };
  };
}