{ ... }: {
  services.caddy.globalConfig = ''
    filesystem garage s3 {
      bucket noratrieb.dev
      region garage
      endpoint http://localhost:3900
      use_path_style
    }
  '';
  services.caddy.virtualHosts = {
    "noratrieb.dev" = {
      logFormat = "";
      extraConfig = ''
        encode zstd gzip
        header -Last-Modified
        file_server {
          fs garage
          # TODO: run precompress script
          # etag_file_extensions .sha256
          # precompressed zstd gzip br
        }
      '';
    };
    "files.noratrieb.dev" = {
      logFormat = "";
      extraConfig = ''
        encode zstd gzip
        reverse_proxy * localhost:3902
      '';
    };
  };
}