{
  inputs,
  pkgs,
  # config,
  ...
}:
{
  services.nginx = {
    enable = true;

    virtualHosts."sorre.xyz" = {
      # enableACME = true;
      # forceSSL = true;
      root = inputs.sorre-website.packages.${pkgs.system}.default;
    };

    virtualHosts."priv.sorre.xyz" = {
      # enableACME = true;
      # forceSSL = true;
      root = "/var/www/priv";
      # basicAuthFile = config.sops.secrets."priv-blog-auth-file".path;
    };
  };
}