{ config, depot, lib, ... }:

{
  services.nginx = {
    enable = lib.mkDefault true;
    virtualHosts."as205479.net" = {
      forceSSL = true;
      locations."/".root = depot.web.as205479 config.networking.hostName;
    };
  };
  my.vault.acmeCertificates."as205479.net" = {
    role = "letsencrypt-gcloud-as205479";
    extraNames = [ "www.as205479.net" ];
    nginxVirtualHosts = [ "as205479.net" ];
  };
}