{
  config,
  ...
}:
{
  config = {
    services.anubis.defaultOptions = {
      enable = true;
      extraFlags = [ "-metrics-bind \"\"" ];
      settings = {
        BIND_NETWORK = "tcp";
        METRICS_BIND_NETWORK = "tcp";
        SERVE_ROBOTS_TXT = true;
        COOKIE_DOMAIN = ".pyrox.dev";
        ED25519_PRIVATE_KEY_HEX_FILE = config.age.secrets.anubis-key.path;
        OG_PASSTHROUGH = true;
        OG_CACHE_CONSIDER_HOST = true;
      };
    };
    age.secrets.anubis-key = {
      file = ./secrets/anubis-key.age;
      owner = "anubis";
      group = "anubis";
    };
  };
}