{ config, depot, lib, ... }:

{
  security.acme.certs."as205479.net" = {
    dnsProvider = "gcloud";
    credentialsFile = depot.ops.secrets.gcpDNSCredentials;
    dnsPropagationCheck = false;
  };
  services.nginx = {
    enable = lib.mkDefault true;
    virtualHosts."as205479.net" = {
      useACMEHost = "as205479.net";
      forceSSL = true;
      locations."/".root = depot.web.as205479 config.networking.hostName;
    };
  };
}