{
  services.nginx.enable = true;
  systemd.services.nginx.serviceConfig.ProtectHome = false;
  services.nginx.virtualHosts."stella.wolfgirl.systems" = {
    forceSSL = true;
    enableACME = true;
    locations."~ \"^/~(.+?)(/.*)?$\"" = {
      alias = "/home/$1/public_html$2";
      index = "index.html";
      extraConfig = ''
        error_page 404 /~$1/404.html;
      '';
    };
  };
  security.acme = {
    acceptTerms = true;
    defaults.email = "me@ezri.pet";
  };
}