{ config, ... }: {

  services.hedgedoc = {
    enable = true;
    settings = {
      port = 8009;
      host = "127.0.0.1";
      domain = "hedgedoc.dryb.org";
      protocolUseSSL = true;

      db = {
        username = "hedgedoc";
        database = "hedgedoc";
        host = "/run/postgresql";
        dialect = "postgresql";
      };

      allowAnonymous = false;
      allowAnonymousEdits = false;
      allowFreeURL = true;
      requireFreeURLAuthentication = true;
      email = true;
      allowEmailRegister = false;

      allowGravatar = true;
    };
  };

}