{ config, ... }:

{
  services.nginx.virtualHosts."monitoring.${config.networking.domain}" = {
    default = true;
    quic = true;
    kTLS = true;
    forceSSL = true;
    enableACME = true;
    #basicAuthFile = config.age.secrets.grafana_basic_auth.path;
    locations = {
      "/" = {
        proxyPass = "http://";
        recommendedProxySettings = true;
      };
    };
  };
}