{ config, pkgs, ... }:
{

  services.trilium-server = {
    enable = true;
    dataDir = "/srv/trilium";
    instanceName = config.networking.hostName;
    host = "10.23.42.28";
    #noAuthentication = true;
    nginx = {
      enable = true;
      hostName = "trilium.${config.networking.hostName}.private";
    };
  };

  services.nginx.virtualHosts."${config.services.trilium-server.nginx.hostName}".extraConfig = ''
    allow ${config.tinc.private.subnet};
    deny all;
  '';

}