+ services.nginx = {
+ recommendedProxySettings = true;
+ recommendedTlsSettings = true;
+
+ virtualHosts = {
+ "breaking.awful.systems" = {
+ forceSSL = true;
+ enableACME = true;
+ };
+
+ "making.awful.systems" = {
+ forceSSL = true;
+ enableACME = true;
+ };
+
+ };