{config, ...}: {
  services.etebase-server = {
    enable = true;
    port = 8001;
    settings = {
      global.secret_file = "${config.age.secrets.etebase-server.path}";
      allowed_hosts.allowed_host1 = "localhost";
    };
  };

  services.nginx = {
    enable = true;
    recommendedTlsSettings = true;
    recommendedOptimisation = true;
    recommendedGzipSettings = true;
    recommendedProxySettings = true;
    virtualHosts = {
      "dav.vhack.eu" = {
        enableACME = true;
        forceSSL = true;
        locations."/".proxyPass = "http://[::1]:8001";
      };
    };
  };
}