inputs:

{ config, lib, ... }:

let
  minifluxPort = 8083;
in
{
  services.miniflux = {
    enable = true;
    config = {
      LISTEN_ADDR = "[${config.topology.mainVpn.currentNodeIP}]:${toString minifluxPort}";
      METRICS_COLLECTOR = "1";
      METRICS_ALLOWED_NETWORKS = config.topology.mainVpn.subnet;
    };
  };

  assertions = [
    {
      assertion = config.services.miniflux.enable ->
        config.services.miniflux.adminCredentialsFile != null;
      message = "Please provide non-default credentials for Miniflux";
    }
  ];

  networking.firewall.interfaces.${config.topology.mainVpn.interfaceName}.allowedTCPPorts = [
    minifluxPort
  ];
}