{ appConfig, lib, ... }: lib.mkMerge [
  {
    port = 9091;
  }
  {
    container.extraFlags = [
      "--load-credential jwtSecret:/etc/nixos/${appConfig.jwtSecret}"
      "--load-credential sessionSecret:/etc/nixos/${appConfig.sessionSecret}"
      "--load-credential storageEncryptionKey:/etc/nixos/${appConfig.storageEncryptionKey}"
    ] ++ (lib.mapAttrsToList
      (username: args:
        "--load-credential ${args.username}.password:/etc/nixos/${args.passwordFile}")
      appConfig.users);
  }
]