{ config, lib, pkgs, ... }:

{

  security.acme = {
    acceptTerms = true;
    defaults.email = "mail@kempinger.xyz"; # Replace with your email
  };

  services.resolved.enable = true;
  services.nginx = {
    enable = true;
    recommendedTlsSettings = true;
    recommendedOptimisation = true;
    recommendedGzipSettings = true;
    recommendedProxySettings = true;
    virtualHosts."192.168.69.69" = {
      default = true;
      root = "/srv/website/public_html";
      locations."/" = { index = "index.html"; };
    };
    # Optional: Add a domain-based virtual host
    virtualHosts."kempinger.at" = {
      root = "/srv/website/public_html";
      locations."/" = { index = "index.html"; };
      forceSSL = true;
      enableACME = true;
    };
  };

  services.vscode-server.enable = true;

  # Virtualisation
  virtualisation.docker = {
    enable = true;
    enableOnBoot = true;
    rootless = {
      enable = true;
      setSocketVariable = true;
    };
  };
}