{ config, ... }:
{
  services.nginx = {
    enable = true;
    virtualHosts."dryb.org" = {
      locations."/" = {
        proxyPass = "http://127.0.0.1:8002";
      };
    };
    virtualHosts."adguard.dryb.org" = {
      locations."/" = {
        proxyPass = "http://127.0.0.1:8001";
      };
    };
    virtualHosts."${config.services.gitea.domain}" = {
      locations."/" = {
        proxyPass = "http://127.0.0.1:8003";
      };
    };
  };

  networking.firewall = {
    allowedTCPPorts = [ 80 ];
  };
}