{ config, ... }:
let 
  domain = "immich.sprechtl.me";
in
{
  services.immich = {
    enable = true;
    database.host = "/run/postgresql";
    port = 2283; # default
    settings.externalDomain = domain;
    mediaLocation = "/data/immich/";
  };

# nginx reverse proxy
  services.nginx.virtualHosts.${domain}= {
    forceSSL = true;
    enableACME = true;
    locations."/" = {
      proxyPass = "http://localhost:2283";
      proxyWebsockets = true;
      extraConfig = "client_max_body_size 50000M;";  # for large video uploads
    };
  };
}