{ config, ... }:
let
  inherit (config.networking) domain;
  mastodon_host = "mastodon.${domain}";
in
{
  security.acme.certs."${domain}".extraDomainNames = [ mastodon_host ];
  services.mastodon = {
    enable = true;
    localDomain = mastodon_host;
    streamingProcesses = 7;
    configureNginx = true;
    smtp = {
      fromAddress = "noreply@${domain}";
    };
    extraConfig.SINGLE_USER_MODE = "true";
  };
}