{outputs, ...}: {
  services = {
    tandoor-recipes = {
      enable = true;
      port = 5030;
    };
    nginx.virtualHosts."recipes.${outputs.secrets.jimDomain}" =  {
      enableACME = true;
      forceSSL = true;
      locations."/" = {
        proxyPass = "http://127.0.0.1:5030";
        proxyWebsockets = true;
      };
    };
  };
}