{
  config,
  pkgs,
  ...
}: {
  services.metabase = {
    enable = true;
    listen.port = 3013;
  };
  systemd.services.metabase.serviceConfig = {
    EnvironmentFile = "${config.age.secrets.metabase-env.path}";
  };
}