{
  config,
  lib,
  pkgs,
  ...
}:
{
  services.discourse = {
    enable = true;
    admin = {
      email = "yisroel.d.baum@gmail.com";
      fullName = "Yisroel Baum";
      passwordFile = config.sops.secrets."discourse-admin-password".path;
      username = "yisroeldbaum";
    };
    database.ignorePostgresqlVersion = true;
    hostname = "discourse.torahimderecheretz.com";
    mail = {
      notificationEmailAddress = "system@torahimderecheretz.com";
      contactEmailAddress = "system@torahimderecheretz.com";

      outgoing = {
        serverAddress = "in-v3.mailjet.com";
        port = 587;
        username = "1ebdd73d944240c1a9c3201e52a1e8c6";
        passwordFile = config.sops.secrets."discourse-mail-key".path;
        authentication = "login";
      };
    };
    secretKeyBaseFile = config.sops.secrets."discourse-secret-key".path;
    siteSettings = {
      required = {
        title = "Torah Im Derech Eretz";
        site_description = "A forum to discuss the ideas of Rav Shamshon Refael Hirsch";
      };
    };
  };

  sops.secrets = {
    "discourse-admin-password" = {
      sopsFile = ./secrets/discourseAdminPassword.yaml;
      mode = "0400";
      key = "password";
      owner = "discourse";
      group = "discourse";
    };
    "discourse-secret-key" = {
      sopsFile = ./secrets/discourseSecretKey.yaml;
      mode = "0400";
      key = "key";
      owner = "discourse";
      group = "discourse";
    };
    "discourse-mail-key" = {
      sopsFile = ./secrets/discourseMailKey.yaml;
      mode = "0400";
      key = "key";
      owner = "discourse";
      group = "discourse";
    };
  };
}