{ config, ... }:
{
  services = {
    caddy.virtualHosts."fuwnme4wbs5x36jjf2usedw2zscozwhazykhyfkjsmudtb7egs3mb7yd.onion".extraConfig = "reverse_proxy localhost:8084";

    tor = {
      enable = true;
      enableGeoIP = false;

      relay.onionServices = {
        "fuwn.me" = {
          version = 3;
          secretKey = config.sops.secrets."fuwnme_onion_secret_key".path;

          map = [
            {
              port = 80;

              target = {
                addr = "[::1]";
                port = 8084;
              };
            }
            {
              port = 80;

              target = {
                addr = "0.0.0.0";
                port = 8084;
              };
            }
          ];
        };
      };

      settings = {
        ClientUseIPv4 = true;
        ClientUseIPv6 = true;
        ClientPreferIPv6ORPort = true;
      };
    };
  };
}