{pkgs, ...}: {
  packages = with pkgs; [
    coreutils
    curl
    fdroidserver
    sops
    git
    cacert
    jq
  ];

  scripts = {
    deploy-docker.exec = ''
      devenv container copy processes
    '';
  };

  services.nginx = {
    enable = true;
    httpConfig = builtins.readFile ./hosting/nginx-http.conf;
  };

  processes.updater.exec = ''
    while true; do
      ${pkgs.writeShellScript "run-updater" (builtins.readFile ./hosting/update.sh)}

      echo "Sleeping for 30 minutes..."
      sleep 1800
    done
  '';

  # environment variables for sops
  # SOPS_PGP_FP
  containers."processes" = {
    name = "gitlab.julian-mutter.de/julian/fdroid-frajul";
    registry = "docker://";

    copyToRoot = []; # avoid copying this repo
    maxLayers = 10;
  };
}