{ config, pkgs, lib, ... }:

{

#  dns.zones."ctu.cx".subdomains."audiobooks.home".CNAME = [ "${config.networking.fqdn}." ];
  services.dnsmasq.settings.cname                       = [ "audiobooks.home.ctu.cx, ${config.networking.fqdn}" ];

  fileSystems."/mnt/audiobooks" = {
    device = "/nix/persist/home/katja/syncthing/Audiobooks";
    options = [ "bind" "ro" ];
  };

  services.nginx = {
    enable = true;
    virtualHosts."audiobooks.home.ctu.cx" = {
      enableACME = lib.mkIf config.networking.usePBBUplink true;
      forceSSL   = lib.mkIf config.networking.usePBBUplink true;
      kTLS       = lib.mkIf config.networking.usePBBUplink true;

      locations = {
        "/jdfoniobhfijnfoilp[dfponbiuyfbu/".alias = "/mnt/audiobooks/";
      };

      extraConfig = ''
#       auth_basic 'Auth required';
#       auth_basic_user_file ${pkgs.writeText "auth-file" "giveme:$apr1$Em5EfPWk$kYnKJF1mIsd2h4heYNfEB."};
      '';
    };
  };

}