{ config, ... }: {
  services.immich = {
    enable = true;
    accelerationDevices = null;
    settings.server.externalDomain = "https://photos.lava.moe";
  };

  me.binds."/var/lib/immich" = "immich";
  hardware.graphics.enable = true;
  users.users.immich.extraGroups = [ "video" "render" ];

  services.nginx.virtualHosts."photos.lava.moe" = {
    useACMEHost = "lava.moe";
    forceSSL = true;
    listenAddresses = config.me.localAddrs;

    locations."/" = {
      proxyPass = "http://[::1]:${toString config.services.immich.port}";
      proxyWebsockets = true;
      extraConfig = ''
        client_max_body_size 50000M;
        proxy_read_timeout   600s;
        proxy_send_timeout   600s;
        send_timeout         600s;
      '';
    };
  };
}