{ config, ... }:

{

  dns.zones."ctu.cx".subdomains.grocy.CNAME = [ "${config.networking.fqdn}." ];

  services.grocy = {
    enable = true;
    hostName = "grocy.ctu.cx";

    nginx.enableSSL = false;

    settings = {
      currency       = "EUR";
      culture        = "de";
      calendar.firstDayOfWeek = 1;
    };
  };

  services.nginx.virtualHosts."${config.services.grocy.hostName}" = {
    useACMEHost = "${config.networking.fqdn}";
    forceSSL    = true;
    kTLS        = true;
  };

}