{ pkgs, config, ... }: {

  virtualisation.oci-containers.containers = {
    # todo fix, requires a config file....
    priviblur = {
      image = "quay.io/pussthecatorg/priviblur:latest";
      ports = [
        "1484:8000"
      ];
    };
  };
  services.nginx = {
    virtualHosts = {
      "priviblur.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:1484";
          extraConfig = ''
            access_log /var/log/nginx/$server_name-access.log json_analytics;
          '';
        };
      };
    };
  };
}