{
  flake,
  config,
  pkgs,
  lib,
  ...
}: {
  security.acme.certs = {
    "invoicing.b12f.io" = {};
  };

  services.nginx.virtualHosts = {
    "invoicing.b12f.io" = {
      forceSSL = true;
      useACMEHost = "invoicing.b12f.io";
      # This redirects to invoiceplane on pie
      locations."/".proxyPass = "https://invoicing.b12f.io";
    };
  };
}