{...}: {
  imports = [
    ./hosts.nix
  ];
  security.acme.acceptTerms = true;
  security.acme.defaults.email = "admin@vhack.eu";
  security.acme.defaults.webroot = "/srv/acme/";

  networking.firewall = {
    allowedTCPPorts = [80 443];
  };
  services.nginx = {
    enable = true;
  };
}
# vim: ts=2