{ base-domain, ... }:
{
  services.nginx = {
    enable = true;
    recommendedTlsSettings = true;
    recommendedOptimisation = true;
    recommendedGzipSettings = true;
    recommendedProxySettings = true;
    virtualHosts = {
      "${base-domain}" = {
        enableACME = true;
      };
      "sourcehut.${base-domain}" = {
        enableACME = true;
      };
      "meta.sourcehut.${base-domain}" = {
        enableACME = true;
      };
      "git.sourcehut.${base-domain}" = { 
        enableACME = true;
      };
      "paperless.${base-domain}" = { 
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "http://localhost:28981";
        };
      };
      "syncthing.${base-domain}" = { 
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "http://syncthing.${base-domain}:8384";
        };
      };
    };
  };
}