{ config, lib, pkgs, ... }:

let
  cfg = config.miniflux;
in
{
  options.miniflux = {
    port = lib.mkOption {
      type = lib.types.int;
    };
  };

  config = {
    age.secrets.miniflux-admin.file = <top/secrets/miniflux-admin.age>;

    services.miniflux = {
      enable = true;
      config = {
        LISTEN_ADDR = "0.0.0.0:${toString cfg.port}";
        DATABASE_URL = "user=miniflux host=/run/postgresql dbname=miniflux";
      };
      # miniflux does not support disabling its authentication. https://github.com/miniflux/v2/issues/408
      adminCredentialsFile = config.age.secrets.miniflux-admin.path;
      createDatabaseLocally = false;
    };
  };
}