{...}: {
  services.nginx = {
    enable = true;

    recommendedProxySettings = true;
    recommendedTlsSettings = true;
    recommendedGzipSettings = true;
    recommendedOptimisation = true;

    virtualHosts = {
      "vinzenz-lpt2" = {
        locations."/" = {
          proxyPass = "http://127.0.0.1:3000/";
          proxyWebsockets = true;
        };

        serverAliases = ["172.23.42.96"];
      };
    };
  };

  networking.firewall = {
    allowedTCPPorts = [80 8001 3000];
    allowedUDPPorts = [2342];
  };
}