{ ... }:

{
  services.nginx = {
    virtualHosts."web-2.net.clerie.de" = {
      enableACME = true;
      forceSSL = true;
      locations."/" = {
        return = "404";
      };
      locations."/public/" = {
        alias = "/var/www/public/";
      };
      locations."/public/centopia/" = {
        alias = "/var/www/public/centopia/";
        extraConfig = ''
          add_header Access-Control-Allow-Origin *;
        '';
      };
    };
  };
}