{ config, lib, pkgs, ... }: {
  age.secrets.discourse-key-base = {
    file = ../secrets/discourse-key-base.age;
    owner = "discourse";
    group = "discourse";
  };

  services.postgresql.package = pkgs.postgresql_13;

  services.discourse = {
    enable = true;
    hostname = "forum.federez.net";
    secretKeyBaseFile = config.age.secrets.discourse-key-base.path;
    # TODO(jeltz): mail
    admin.skipCreate = true;
  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];
}