{ me, pkgs, lib, ... }:

{
  imports = [
    ../../modules/common.nix

    ./hardware.nix
    ./devices.nix

    ../../modules/www.nix

    ../../services/dendrite.nix
    ../../services/pds.nix
    ../../services/akkoma
  ];

  services.nginx.virtualHosts = {
    "soc.rnrd.eu" = {
      forceSSL = true;
      enableACME = true;

      locations."/" = {
        proxyWebsockets = true;
        proxyPass = "http://127.0.0.1:1111";
      };
    };

    "matrix.rnrd.eu" = {
      forceSSL = true;
      enableACME = true;

      locations."/_matrix" = {
        proxyPass = "http://127.0.0.1:8008";
      };
    };

    "pds.rnrd.eu" = {
      # NOTE: technically this isn't needed if
      # we aren't using the PDS as a handle provider?
      # serverAliases = [ "*.pds.rnrd.eu" ];
      forceSSL = true;
      enableACME = true;

      locations."/" = {
        proxyWebsockets = true;
        proxyPass = "http://127.0.0.1:16419";
      };
    };
  };

  system.stateVersion = "23.05";
}