{ globals, ... }:
{
  services.invidious = {
    enable = true;
    inherit (globals.services.invidious) domain;
    sig-helper.enable = true;
    settings = {
      external_port = 443;
      https_only = true;
      popular_enabled = false;
      default_user_preferences = {
        dark_mode = "dark";
        feed_menu = [
          "Subscriptions"
          "Playlists"
          "Trending"
        ];
        default_home = "Subscriptions";
        player_style = "youtube";
        quality = "dash";
        save_player_pos = true;
        local = true;
        extend_desc = true;
      };
    };
  };
  environment.persistence."/persist".directories = [
    { directory = "/var/lib/private/invidious"; }
    {
      directory = "/var/lib/postgresql";
      user = "postgres";
      group = "postgres";
    }
  ];

  wireguard.services = {
    client.via = "nucnix";
    firewallRuleForNode.nucnix-nginx.allowedTCPPorts = [ 3000 ];
  };
}