{ config, pkgs, inputs, lib, ... }: {

  imports = [ ../nginx.nix ];

  services.nginx = {
    virtualHosts = {
      "notes.purrfect.estate" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = "http://localhost:9005";
          proxyWebsockets = true;
        };
      };
    };
  };

  virtualisation.oci-containers.containers.cryptpad = {
    image = "promasu/cryptpad";
    ports = [ "9005:3000" ];
  };

}