{ config, pkgs, ... }:

{
  services.zammad = {
    enable = true;
    port = 3010;
    secretKeyBaseFile = config.sops.secrets.zammad-key-base.path;
    database = {
      createLocally = true;
    };
  };
  
  services.nginx.enable = true;
  services.nginx.virtualHosts."support.cloonar.com" = {
    forceSSL = true;
    enableACME = true;
    acmeRoot = null;
    locations."/" = {
      proxyPass = "http://127.0.0.1:3010";
      proxyWebsockets = true;
      extraConfig =
        "proxy_connect_timeout  300;" +
        "proxy_send_timeout     300;" +
        "proxy_read_timeout     300;" +
        "send_timeout           300;"
      ;
    };
    locations."/ws" = {
      proxyPass = "http://127.0.0.1:6042";
      proxyWebsockets = true;
      extraConfig =
        "proxy_read_timeout     86400;" +
        "send_timeout           300;"
      ;
    };
  };

  sops.secrets = {
    zammad-db-password = {
      sopsFile = ./secrets.yaml;
      owner = "zammad";
    };
    zammad-key-base = {
      sopsFile = ./secrets.yaml;
      owner = "zammad";
    };
  };

  services.postgresqlBackup.enable = true;
  services.postgresqlBackup.databases = [ "zammad" ];
}