{ config, ... }: { services.nginx.virtualHosts."lemmy.${config.secrets.jimDomain}" = { enableACME = true; forceSSL = true; }; }