{ config, ... }:
{
  services.gitea.enable = true;
  security.acme.certs."${config.domainName}".extraDomainNames = [ "git.${config.domainName}" ];
  services.nginx.virtualHosts."git.${config.domainName}" = {
    useACMEHost = config.domainName;
    addSSL = true;
    locations."/".proxyPass = "http://localhost:${toString config.services.gitea.settings.server.HTTP_PORT}";
  };
}