{ config, pkgs, ... }:

{
	security.acme.defaults.email = "porject-a@project-a.space";
	security.acme.acceptTerms = true;

	services.nginx = {
		enable = true;
		recommendedTlsSettings = true;
		recommendedOptimisation = true;
		defaultSSLListenPort = 443;

		virtualHosts = {
			"affine.project-a.space" = {
				forceSSL = true;
				enableACME = true;
				locations."/" = {
					proxyPass = "http://localhost:3010";
				};
			};
		};
	};
}