{ ... }: let domain = "pw.sondell.org"; port = "8222"; in { # services.vaultwarden = { enable = true; }; services.nginx.virtualHosts.${domain} = { forceSSL = true; enableACME = true; locations."/" = { proxyPass = "http://localhost:${port}/"; }; }; }