{ config, ... }:
{
  age.secrets.paperless-admin.file = ../secrets/paperless-admin.age;

  services.paperless = {
    enable = true;
    passwordFile = config.age.secrets.paperless-admin.path;
    consumptionDirIsPublic = true;
    dataDir = "/mnt/paperless";
    # port = 28981;

    settings = {
      PAPERLESS_URL = "https://docs.alpine-centauri.ts.net";
      PAPERLESS_OCR_LANGUAGE = "deu+eng";
    };
  };
  users.users.paperless.extraGroups = [ "media" ];
}