{ config, ... }:
let
  domain = "opia.ovh";
  subdomain = "wiki";
in
{
  services.gollum = {
    enable = true;
    emoji = true;
    branch = "main";
  };

  services.caddy.virtualHosts."${subdomain}.${domain}" = {
    extraConfig = ''
      tls {
        dns_challenge_override_domain _acme-challenge.${subdomain}.opia.${config.networking.domain}
      }
      encode zstd gzip
      reverse_proxy localhost:${toString config.services.gollum.port}

      import tg_auth
    '';
  };
}