{ lib, pkgs, ... }:
let
  d = lib.py.data.services.nextcloud-office;
in
{
  services.collabora-online = {
    enable = true;
    port = d.port;
    settings = {
      ssl.enable = false;
      ssl.termination = true;
    };
    aliasGroups = [
      {
        host = "https://office.pyrox.dev:443";
      }
      {
        host = "https://cloud.pyrox.dev:443";
      }
    ];
  };
  services.anubis.instances.nextcloud-office = {
    settings = {
      BIND = ":${toString d.anubis}";
      POLICY_FNAME = "${pkgs.py.anubis-files}/policies/nextcloud-office.yaml";
      TARGET = "http://localhost:${toString d.port}";
    };
  };
}