security.acme.email = "nly@disroot.org";
  security.acme.acceptTerms = true;

    nginx = {
      enable = true;
      recommendedProxySettings = true;
      recommendedTlsSettings = true;
      virtualHosts."nly.cyka.cf" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "http://127.0.0.1:3000";
          proxyWebsockets = true;
          extraConfig =
            "proxy_set_header X-Forwarded-For $remote_addr;"
            + "proxy_set_header Host $host;"
          ;
        };
      };
    };