{ config, pkgs, ... }:

{
  security.acme.certs."${config.networking.domain}".extraDomainNames = [
    "fundkorb.ktiu.net"
  ];

  services.nginx.virtualHosts."fundkorb.ktiu.net" = {
    onlySSL = true;
    useACMEHost = config.networking.domain;
    root = "/var/www/fundkorb-button/html";
    locations."/" = {
      basicAuth = "Fundkorb build trigger";
      basicAuthFile = "/var/www/fundkorb-button/.htpasswd";
    };
  };
}