{
  config,
  self,
  ...
}:
let
  d = self.lib.data.services.miniflux;
in
{
  services.miniflux = {
    enable = true;
    config = {
      PORT = d.port;
      FETCH_YOUTUBE_WATCH_TIME = 1;
      BASE_URL = "https://${d.extUrl}";
      CREATE_ADMIN = 1;
      WEBAUTHN = 1;
      WORKER_POOL_SIZE = 5;
    };
    adminCredentialsFile = config.age.secrets.miniflux-admin.path;
  };
  users.users.miniflux.isSystemUser = true;
  users.users.miniflux.group = "miniflux";
  users.groups.miniflux = { };
  age.secrets = {
    miniflux-admin = {
      file = ./secrets/miniflux-admin.age;
      owner = "miniflux";
      group = "miniflux";
    };
  };
  services.anubis.instances.miniflux = {
    settings = {
      BIND = ":${toString d.anubis}";
      TARGET = "http://localhost:${toString d.port}";
    };
  };
}