{ pkgs, ... }:

{
  systemd.tmpfiles.rules = [
    "d /opt/cgithub 0755 joe users"
  ];

  systemd.sockets.cgithub = {
    wantedBy = [ "sockets.target" ];
    socketConfig = {
      ListenStream = "/run/cgithub/socket";
      SocketGroup = "nginx";
      SocketMode = "0660";
    };
  };

  systemd.services.cgithub = {
    requires = [ "cgithub.socket" ];
    after = [ "cgithub.socket" ];
    serviceConfig = {
      Type = "exec";
      DynamicUser = true;
      WorkingDirectory = "/opt/cgithub";
    };
    script = ''
      exec ${pkgs.nodejs-slim_24}/bin/node dist/build/index.js
    '';
  };

  services.nginx.virtualHosts."fluffy-kitten.elmo.mou.fo" = {
    useACMEHost = "elmo.mou.fo";
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://unix:/run/cgithub/socket";
    };
  };
}