{ pkgs, ...}:
{
  services.vikunja = {
    enable = true;
    frontendScheme = "https";
    frontendHostname = "todo.lewd.wtf";
  };
  services.nginx.virtualHosts."todo.lewd.wtf" = {
    enableACME = true;
    forceSSL = true;
    locations = {
      "/" = {
        root = pkgs.vikunja-frontend;
        tryFiles = "try_files $uri $uri/ /";
      };
      "~* ^/(api|dav|\\.well-known)/" = {
        proxyPass = "http://localhost:3456";
        extraConfig = ''
          client_max_body_size 20M;
        '';
      };
    };
  };
}