{ config, pkgs, ... }:

{
  security.acme.certs."${config.networking.domain}".extraDomainNames = [ "kshmap.ktiu.net" ];

  services.nginx.virtualHosts."kshmap.ktiu.net" = {

    # forceSSL = true;
    # enableACME = true;

    onlySSL = true;
    useACMEHost = config.networking.domain;
    root = "/var/www/ksh-map/dist";
  };
}