{config, ...}: {
  sops.secrets = {
    umami-secret = {
      mode = "0600";
    };
  };
  services.umami = {
    enable = true;
    settings = {
      PORT = 8097;
      APP_SECRET_FILE = config.sops.secrets.umami-secret.path;
      DISABLE_TELEMETRY = true;
      DISABLE_BOT_CHECK = true;
    };
  };
  services.cloudflared.tunnels."f7c8f777-a36c-4b9a-b6e3-6a112bd43e73".ingress."umami.hadi.diy" = "http://localhost:${toString config.services.umami.settings.PORT}";
  systemd.services.default-creds.environment = {
    PUBLIC_UMAMI_URL = "https://umami.hadi.diy";
    PUBLIC_UMAMI_WEBSITE_ID = "7197484c-01ad-488e-9caa-5ab7b7595f08";
    UMAMI_URL = "http://localhost:8097";
    UMAMI_WEBSITE_ID = "7197484c-01ad-488e-9caa-5ab7b7595f08";
  };
}