{config, ...}: {
  services.zulip = {
    enable = true;

    # lets it set up my postgresql for me
    enablePostgresqlLocally = true;

    # host domain
    host = "chat.${config.networking.domain}";

    # secrets
    camoKeyFile = builtins.toString config.age.secrets.zulip-camoKey.path;
    rabbitmqPasswordFile = builtins.toString config.age.secrets.zulip-rabbitmqPassword.path;
    secretKeyFile = builtins.toString config.age.secrets.zulip-secretKey.path;
    sharedSecretKeyFile = builtins.toString config.age.secrets.zulip-sharedSecretKey.path;
    avatarSaltKeyFile = builtins.toString config.age.secrets.zulip-avatarSaltKey.path;

    # settings
    zulipSettings = {
      OPEN_REALM_CREATION = true;
      EXTERNAL_HOST = config.services.zulip.host;
      ZULIP_ADMINISTRATOR = "admin@${config.networking.domain}";
    };
  };
}