{ pkgs, config, ... }: {

  virtualisation.oci-containers.containers = {

    rimgo = {
      image = "codeberg.org/rimgo/rimgo:latest";
      ports = [
        "4312:3000"
      ];
      environment = {
        ADDRESS = "0.0.0.0";
        PORT = "3000";
        FIBER_PREFORK = "false";

        # Link to a privacy policy (optional)
        PRIVACY_POLICY = "https://4o1x5.dev/privacy-policy";
        # Explain how this data is used/why it is collected (optional)
        PRIVACY_MESSAGE = "Read my privacy policy on my website";
        # Country where instance is located. Leave blank if running on Tor without clearnet.
        PRIVACY_COUNTRY = "HU";
        # Hosting provider or ISP name. Leave blank if running on Tor without clearnet.
        PRIVACY_PROVIDER = "Telekom";
        # Set to true if you use Cloudflare (using Cloudflare only as DNS (gray cloud icon), set to false)
        PRIVACY_CLOUDFLARE = "false";
        PRIVACY_NOT_COLLECTED = "false";

        # IP address
        PRIVACY_IP = "true";
        # Request URL
        PRIVACY_URL = "true";
        # Device Type (User agent)
        PRIVACY_DEVICE = "true";

        PRIVACY_DIAGNOSTICS = "false";
      };
    };
  };


  services.nginx = {
    virtualHosts = {
      "rimgo.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:4312";
          extraConfig = ''
            access_log /var/log/nginx/$server_name-access.log json_analytics;
          '';
        };
      };
    };
  };
}