{ pkgs, ... }:

let
  # The Makefile copies cgithub/ next to this flake before rebuilding.
  cgithub = pkgs.callPackage ./packages/cgithub { src = ./cgithub; };
in
{
  systemd.sockets.cgithub = {
    wantedBy = [ "sockets.target" ];
    socketConfig = {
      ListenStream = "/run/cgithub/socket";
      SocketGroup = "nginx";
      SocketMode = "0660";
    };
  };

  systemd.services.cgithub = {
    requires = [ "cgithub.socket" ];
    after = [ "cgithub.socket" ];
    serviceConfig = {
      Type = "exec";
      DynamicUser = true;
      ExecStart = "${cgithub}/bin/cgithub-server";
    };
  };

  services.nginx.virtualHosts."fluffy-kitten.elmo.mou.fo" = {
    useACMEHost = "elmo.mou.fo";
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://unix:/run/cgithub/socket";
    };
  };
}