{ config, sources, ... }:

{
  nixpkgs.overlays = [ (import (sources.arkheon.outPath + "/overlays.nix")) ];

  services.arkheon = {
    enable = true;

    domain = "arkheon.dgnum.eu";

    nginx = {
      enableACME = true;
      forceSSL = true;
    };

    envFile = config.age.secrets."arkheon-env_file".path;
  };
}