{ config, lib, pkgs, ... }:
{
  security.acme = {
    email = "admin@c3d2.de";
    acceptTerms = true;
  };

  services.nginx = {
    enable = true;
    virtualHosts."gitea.c3d2.de" = {
      forceSSL = true;
      enableACME = true;
      locations."/".proxyPass = "http://localhost:3000";
    };
  };
}