{ me, pkgs, lib, ... }:

{
  imports = [
    ../../modules/common.nix

    ./hardware.nix
    ./devices.nix

    ../../modules/www.nix

    ../../services/dendrite.nix
    ../../services/pds.nix
    ../../services/akkoma
  ];

  security.acme.certs."pds.rnrd.eu" = {
    group = "nginx";
    domain = "*.pds.rnrd.eu";
    extraDomainNames = [ "pds.rnrd.eu" ];
    dnsProvider = "cloudflare";
    credentialFiles = {
      # TODO: use age
      CLOUDFLARE_DNS_API_TOKEN_FILE = "/home/mel/cloudflare-dns-token.pw";
    };
  };

  services.nginx.virtualHosts = {
    "soc.rnrd.eu" = {
      forceSSL = true;
      enableACME = true;

      locations."/" = {
        proxyWebsockets = true;
        proxyPass = "http://127.0.0.1:1111";
      };
    };

    "matrix.rnrd.eu" = {
      forceSSL = true;
      enableACME = true;

      locations."/_matrix" = {
        proxyPass = "http://127.0.0.1:8008";
      };
    };

    "pds.rnrd.eu" = {
      serverAliases = [ "*.pds.rnrd.eu" ];
      forceSSL = true;
      useACMEHost = "pds.rnrd.eu";

      locations."/" = {
        proxyWebsockets = true;
        proxyPass = "http://127.0.0.1:16419";
      };
    };
  };

  system.stateVersion = "23.05";
}