{pkgs, outputs, ...}: {
  services.pixelfed = {
    enable = true;
    domain = "pics.${outputs.secrets.jimDomain}";
    secretFile = pkgs.writeText "appkey" outputs.secrets.pixelfedKey;
    settings = {
      APP_NAME = ''"Jimbo's Pixelfed"'';
      INSTANCE_DESCRIPTION = ''"The Jimbosfiles Pixelfed Instance"'';
      INSTANCE_CONTACT_EMAIL = "jimbo@${outputs.secrets.jimDomain}";
      OPEN_REGISTRATION = true;
      APP_LOCALE = "en";
      INSTANCE_DISCOVER_PUBLIC = false;
      STORIES_ENABLED = true;

      # Mail config
      ENFORCE_EMAIL_VERIFICATION = true;
      MAIL_FROM_ADDRESS = "noreply@${outputs.secrets.jimDomain}";
      MAIL_FROM_NAME = ''"Jimbo's Pixelfed <noreply@${outputs.secrets.jimDomain}>"'';
      MAIL_ENCRYPTION = "tls";
      MAIL_DRIVER = "smtp";
      MAIL_HOST = "mx.${outputs.secrets.jimDomain}";
      MAIL_PORT = 587;
      MAIL_USERNAME = "noreply@${outputs.secrets.jimDomain}";
      MAIL_PASSWORD = "${outputs.secrets.noreplyPassword}";
    };
    nginx = {
      enableACME = true;
      forceSSL = true;
    };
  };
}