{ ... }: {
  imports = [ ./acme.nix ];
  networking.firewall.allowedTCPPorts = [ 80 443 ];

  services.nginx = {
    enable = true;

    virtualHosts."sorre.xyz" = {
      enableACME = true;
      forceSSL = true;
      root = "/var/www/blog";
    };
  };
}