{ config, pkgs, ... }:

let
  fqdn = "schwulesding.de";
in
{
  services.nginx = {
    enable = true;
    recommendedTlsSettings = true;
    recommendedOptimisation = true;
    recommendedGzipSettings = true;
    recommendedProxySettings = true;
    # nginx would warn otherwise
    mapHashBucketSize = 64;

    virtualHosts = {
      ${fqdn} = {
        forceSSL = true;
        enableACME = true;
        root = "/var/www/schwulesding";
      };

      "www.${fqdn}" = {
        enableACME = true;
        root = "/var/www/schwulesding";
      };
    };
  };
}