{ dnsNix, node, pkgs, lib, config, ...}:

{

  dns.zones."ctu.cx"    = (dnsNix.combinators.host node.ip4Address node.ip6Address);
  dns.zones."katja.wtf" = (dnsNix.combinators.host node.ip4Address node.ip6Address);

  services.nginx = {
    enable = true;
    virtualHosts."ctu.cx" = {
      useACMEHost = "${config.networking.fqdn}";
      forceSSL      = true;
      serverAliases = [ "katja.wtf" ];
      kTLS          = true;
      root          = pkgs.ctucx-website;
    };
  };

}