{ config, ... }:
{
  services.invidious = {
    enable = true;
    port = 3001;
    database = {
      createLocally = false;
      host = "postgres";
      passwordFile = "/etc/nixos/keys/invidious-dbpassword";
    };
  };
  networking.firewall.allowedTCPPorts = [ config.services.invidious.port ];
  systemd.services.invidious.serviceConfig = {
    Restart = "always";
    RestartSec = "2s";
  };
}

# vim: set et ts=2 sw=2 ai: