{ config, pkgs, ... }:

{
  services.jenkins = {
    enable = true;
    port = 7401;
  };

  security.acme.certs."${config.networking.domain}".extraDomainNames = [
    "jenkins.${config.networking.domain}"
  ];

  services.nginx.virtualHosts = {
    "jenkins.${config.networking.domain}" = {
      onlySSL = true;
      useACMEHost = config.networking.domain;
      locations."/" = {
        proxyPass = "http://127.0.0.1:${toString config.services.jenkins.port}";
        proxyWebsockets = true;
      };
    };
  };
}