{
  config,
  pkgs,
  lib,
  ...
}:

{
  networking.hostName = "aratta";

  imports = [
    ./hardware.nix

    ../../modules/server.nix
    ../../modules/users.nix
    ../../modules/bind.nix
    ../../modules/nginx.nix
    ../../modules/forgejo.nix

    ../../users/root.nix
    ../../users/hackerncoder.nix
  ];

  services.nginx = {
    virtualHosts = {
      # "queerscriptors.org" = {
      #   forceSSL = true;
      #   enableACME = true;
      #   root = "/var/www/queer/main";
      #   locations = {
      #     "/" = {
      #       tryFiles = "$uri $uri/ =404";
      #       index = "index.html";
      #       extraConfig = ''
      #         ${config.services.nginx.appendHttpConfig}

      #         add_header Content-Security-Policy "default-src 'none'; font-src 'self'; img-src 'self' https://littleroot.net; style-src 'self';";
      #       '';
      #     };
      #     "~ ^/(css|fonts|images)" = {
      #       tryFiles = "$uri =404";
      #     };
      #   };
      # };
      # "weblate.queerscriptors.org" = {
      #   enableACME = true;
      #   globalRedirect = "https://littleroot.net/weblate/";
      # };
      "comlib.encryptionin.space" = {
        forceSSL = true;
        enableACME = true;
        root = "/var/www/comlib";
        locations = {
          "/".tryFiles = "$uri $uri/ =404";
          "= /".index = "eupbs/index.html";
          "/lib/" = {
            alias = "/var/www/comlib-lib/";
            tryFiles = "$uri =404";
          };
          "/lib/html/" = {
            alias = "/var/www/comlib-lib/html";
            tryFiles = "$uri $uri/index.html =404";
          };
        };
        extraConfig = ''
          error_page 404 /404.html;
        '';
      };
    };
  };

  system.stateVersion = "24.05";
}