{ config, ... }:

let
  fqdn = "dav.${config.networking.domain}";
in
{
  imports = [
    ../../services/nginx.nix
    ../../services/prometheus-nginx.nix
  ];

  services = {
    baikal = {
      enable = true;
      virtualHost = fqdn;
    };

    nginx.virtualHosts.${fqdn} = {
      default = true;
      quic = true;
      kTLS = true;
      forceSSL = true;
      enableACME = true;
      extraConfig = ''
        proxy_set_header Forwarded "$proxy_forwarded_for_element;$proxy_forwarded_by_element;host=$host;proto=$scheme";
        error_log syslog:server=unix:/dev/log,tag=${builtins.replaceStrings [ "." ] [ "_" ] fqdn} warn;
        access_log syslog:server=unix:/dev/log vhost_combined;
      '';
    };
  };
}