{ node, config, pkgs, lib, ... }:

{

  dns.zones."ctu.cx".subdomains."audiobooks.home".AAAA = [ node.ip6Address ];

  fileSystems."/mnt/audiobooks" = {
    device = "/nix/persist/home/katja/syncthing/Audiobooks";
    options = [ "bind" "ro" ];
  };

  services.nginx = {
    enable = true;
    virtualHosts."audiobooks.home.ctu.cx" = {
      useACMEHost = "${config.networking.fqdn}";
      forceSSL    = true;
      kTLS        = true;

      locations = {
        "/jdfoniobhfijnfoilp[dfponbiuyfbu/".alias = "/mnt/audiobooks/";
      };

      extraConfig = ''
#       auth_basic 'Auth required';
#       auth_basic_user_file ${pkgs.writeText "auth-file" "giveme:$apr1$Em5EfPWk$kYnKJF1mIsd2h4heYNfEB."};
      '';
    };
  };

}