{
  config,
  lib,
  pkgs,
  ...
}:
{
  services.sftpgo = {
    enable = true;
    package = pkgs.sftpgo;
    settings = {
      httpd.bindings = lib.singleton {
        port = 8080;
        address = "0.0.0.0";
        enable_web_client = true;
        enable_web_admin = true;
      };
    };
  };

  services.caddy.virtualHosts."${config.networking.hostName}.brownbread.net".extraConfig = ''
    root * /web/client
    encode zstd gzip
    reverse_proxy http://localhost:8080
  '';
}