{config, ...}: let
  serviceName = "pgadmin";
  servicePort = config.m3ta.ports.get serviceName;
in {
  services.pgadmin = {
    enable = true;
    initialPasswordFile = "${config.age.secrets.pgadmin-pw.path}";
    initialEmail = "sascha.koenig@azintec.com";
  };

  # Traefik configuration specific to pgadmin
  services.traefik.dynamicConfigOptions.http = {
    services.pgadmin.loadBalancer.servers = [{url = "http://localhost:${toString servicePort}/";}];
    routers.pgadmin = {
      rule = "Host(`pg.l.az-gruppe.com`)";
      tls.certResolver = "ionos";
      service = "pgadmin";
      entrypoints = "websecure";
    };
  };
}