{ config, lib, pkgs, ... }:
let
  fcgiPort = (import ../data/aliases.nix).services.fcgi.port;
in
{
  networking.firewall.allowedTCPPorts = [ fcgiPort ];

  services.fcgiwrap = {
    enable = true;
    socketType = "tcp";
    socketAddress = "0.0.0.0:${toString fcgiPort}";
    user = "fcgi";
    group = "fcgi";
  };
}