{ pkgs, config, ... }:
{
  services.miniflux = {
    enable = true;
    config = {
      BASE_URL = "https://read.datarift.nl";
      LISTEN_ADDR = "/run/miniflux/miniflux.sock";
      POLLING_SCHEDULER = "entry_frequency";
      OAUTH2_PROVIDER = "oidc";
      OAUTH2_CLIENT_ID_FILE = config.sops.secrets.miniflux-oidc-client-id.path;
      OAUTH2_CLIENT_SECRET_FILE = config.sops.secrets.miniflux-oidc-client-secret.path;
      OAUTH2_REDIRCT_URL = "https://read.datarift.nl/oauth2/oidc/callback";
      OAUTH2_OIDC_DISCOVERY_ENDPOINT = "https://id.datarift.nl/realms/datarift/";
      ADMIN_USERNAME_FILE = config.sops.secrets.miniflux-admin-user.path;
      ADMIN_PASSWORD_FILE = config.sops.secrets.miniflux-admin-password.path;
      WEBAUTHN = 1;
    };
    adminCredentialsFile = pkgs.writeText "miniflux-dummy-admin-credentials" "";
  };
}