{...}: {
  services.immich = {
    enable = true;
    settings = {
      server.externalDomain = "https://photos.everest.tailscale";
      server.publicUsers = false;
    };
  };
  # Add a record for transmission
  services.headscale.settings.dns.extra_records = [
    {
      name = "photos.everest.tailscale";
      type = "A";
      value = "100.100.0.1";
    }
  ];
  services.caddy.virtualHosts.immich = {
    hostName = "photos.everest.tailscale";
    extraConfig = ''
      import tailscale
      reverse_proxy localhost:2283
    '';
  };
  programs.rust-motd.settings.service_status."Immich" = "immich-server";
}