{ config, lib, pkgs, ... }:

{

  services.nginx.enable = true;

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  services.nginx.virtualHosts = {
    "${config.networking.fqdn}" = {
      enableACME = true;
      forceSSL = true;
      root = pkgs.writeTextFile {
        name = "dn42-router-documentation";
        text = config.profiles.clerie.dn42-router.htmlDocumentation;
        destination = "/index.html";
      };
    };
  };

}