{ pkgs, ... }: {
  services.atticd = {
    enable = true;
    user = "atticd";
    group = "atticd";
    mode = "monolithic";
    environmentFile = "/var/lib/secrets/atticd.env";
    settings = {
      listen = "127.0.0.1:1345";
      allowed-hosts = [ "nix-cache.sorre.internal" ];
      database.url = "sqlite:///var/lib/atticd/server.db?mode=rwc";
      storage = {
        type = "local";
        path = "/var/lib/atticd/storage";
      };
    };
  };

  environment.systemPackages = [ pkgs.attic-client ];
}