{ config, lib, ... }:
{
  services.tangled.knot = {
    enable = true;
    openFirewall = false;
    stateDir = "/var/lib/tangled";
    repo.scanPath = "/var/lib/tangled/repos";
    server = {
      hostname = "knot.monke.moe";
      owner = "did:plc:dlxa6xglnevgshddrhscr6nj";
    };
  };

  forest.nginxHosts = [
    (lib.mkIf config.services.tangled.knot.enable {
      "knot.monke.moe" = {
        onlySSL = true;
        useACMEHost = "monke.moe";
        http2 = true;
        locations."/" = {
          proxyPass = "http://127.0.0.1:5555";
          proxyWebsockets = true;
        };
      };
    })
  ];
}