{
  inputs,
  pkgs,
  config,
  ...
}:
{
  imports = [ ./acme.nix ];

  services.nginx = {
    enable = false;

    virtualHosts."sorre.xyz" = {
      enableACME = true;
      forceSSL = true;
      root = inputs.sorre-website.packages.${pkgs.system}.default;
    };

    virtualHosts."priv.sorre.xyz" = {
      enableACME = true;
      forceSSL = true;
      root = "/var/www/priv";
      basicAuthFile = config.sops.secrets."priv-blog-auth-file".path;
    };
  };
}