{
  domain,
  ...
}: {
  config,
  ...
}: {
  hectic.services.attic = {
    enable          = true;
    hostName        = "cache.${domain}";
    port            = 8081;
    environmentFile = config.sops.secrets."atticd/environment".path;
    storage = {
      bucket   = "cache-hectic-lab";
      endpoint = "https://hel1.your-objectstorage.com";
      region   = "hel1";
    };
  };

  services.nginx.virtualHosts."cache.${domain}" = {
    enableACME = true;
    forceSSL   = true;
    extraConfig = ''
      client_max_body_size 0;
    '';
    locations."/" = {
      proxyPass = "http://127.0.0.1:8081";
    };
  };
}