{ pkgs, inputs, config, ... }:
{
  services.nginx = {
    enable = true;
    virtualHosts = {

      "www.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;

        locations."/" = {
          root = pkgs.callPackage ../services/website/default.nix { };
        };
      };

      "${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;

        locations."/" = {
          root = pkgs.callPackage ../services/website/default.nix { };
        };
        extraConfig = ''
          error_page 404 /404.html;
          deny 3.1.202.244;
          deny 170.64.219.93;
          deny 91.215.85.43;
          client_max_body_size 900M;
        '';
      };
    };
  };

  security.acme = {
    acceptTerms = true;
    defaults.email = "admin+acme@4o1x5.dev";
  };

}