{ config, ... }:

{
  services.nginx.virtualHosts."monitoring.${config.networking.domain}" = {
    default = true;
    quic = true;
    kTLS = true;
    forceSSL = true;
    enableACME = true;
    locations = {
      "/" = {
        basicAuthFile = config.age.secrets.grafana_basic_auth.path;
        #proxyPass = "http://";
        #recommendedProxySettings = true;
        return = "418 \"☕️\"";
      };
    };
  };
}