{ config, pkgs, ... }:

{
	security.acme.defaults.email = "project-a@project-a.space";
	security.acme.acceptTerms = true;

	services.nginx = {
		enable = true;
		recommendedTlsSettings = true;
		recommendedOptimisation = true;
		defaultSSLListenPort = 443;

		virtualHosts = {
			"affine.project-a.space" = {
				forceSSL = true;
				enableACME = true;
				locations."/".proxyPass = "http://localhost:3010";
			};
			"n8n.project-a.space" = {
				forceSSL = true;
				enableACME = true;
				locations."/" = {
					proxyPass = "http://localhost:5678";
					proxyWebsockets = true;
				};
			};
			"cinema.project-a.space" = {
				forceSSL = true;
				enableACME = true;

				locations."/" = {
					proxyPass = "http://localhost:8096";
					proxyWebsockets = true;
				};
			};
			"dnd.project-a.space" = {
				forceSSL = true;
				enableACME = true;

				locations."/" = {
					proxyPass = "http://localhost:7070";
					proxyWebsockets = true;
				};
			};
			"sd.project-a.space" = {
				forceSSL = true;
				enableACME = true;

				locations."/" = {
					proxyPass = "http://192.168.0.2:7860";
					proxyWebsockets = true;
				};
			};
		};
	};
}