{flakes,...}: {
  # imports = [
  #   flakes.mapf.nixosModules.default
  # ];

  sops.secrets.mapf = {
    sopsFile = ../../../secrets/mapf-prod.env;
  };

  services.nginx = {
    virtualHosts."mapf.donsz.nl" = {
      forceSSL = true;
      http2 = true;
      enableACME = true;

      locations."/" = {
        proxyPass = "http://[::1]:8080";
      };
    };
  };

  # donsz.services.mapf = {
  #   enable = true;
  #   envfile = "/run/secrets/sops/mapf";
  #   db_name = "mapfprod";
  #   db_user = "mapfprod";
  #   db_password = "";
  # };
}