{
  config,
  pkgs,
  service_configs,
  lib,
  ...
}:
{
  imports = [
    (lib.serviceMountWithZpool "trilium-server" service_configs.zpool_ssds [
      (service_configs.services_dir + "/trilium")
    ])
  ];

  services.trilium-server = {
    enable = true;
    port = service_configs.ports.private.trilium.port;
    host = "127.0.0.1";
    dataDir = service_configs.trilium.dataDir;
  };

  services.caddy.virtualHosts."notes.${service_configs.https.domain}".extraConfig = ''
    import ${config.age.secrets.caddy_auth.path}
    reverse_proxy :${toString service_configs.ports.private.trilium.port}
  '';
}