{config, ...}:{
  services = {
    zammad = {
      enable = true;
      openPorts = false;
      port = 3034;
      secretKeyBaseFile = "${config.age.secrets.zammad-secret.path}";
      database = {
        createLocally = false;
        port = 5432;
        host = "127.0.0.1";
        passwordFile = "${config.age.secrets.zammad-pw.path}";
      };
    };
  };

  # Traefik configuration specific to littlelink
  services.traefik.dynamicConfigOptions.http = {
    services.zammad.loadBalancer.servers = [
      {
        url = "http://localhost:3034/";
      }
    ];

    routers.zammad = {
      rule = "Host(`help.az-gruppe.com`)";
      tls = {
        certResolver = "ionos";
      };
      service = "zammad";
      entrypoints = "websecure";
    };
  };
}