{ pkgs, ... }:
let
  domain = "mealie.tdback.net";
  port = 9000;
in
{
  services.mealie = {
    enable = true;
    package = pkgs.mealie;
    listenAddress = "0.0.0.0";
    port = port;
    settings = {
      BASE_URL = domain;
      TZ = "America/Detroit";
      ALLOW_SIGNUP = "false";
      SECURITY_MAX_LOGIN_ATTEMPTS = 3;
      DB_ENGINE = "sqlite";
    };
  };

  services.caddy.virtualHosts.${domain}.extraConfig = ''
    encode zstd gzip
    reverse_proxy http://localhost:${builtins.toString port}
  '';
}