security.acme.acceptTerms = true;
  security.acme.email = "nly@disroot.org";
  services.nginx.enable = true;
  services.nginx.virtualHosts."nly.cyka.cf" = {
    addSSL = true;
    enableACME = true;
    root = "/var/www/nly.cyka.cf";
  };