{
  services.nginx.virtualHosts."kasm.lewd.wtf" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "https://192.168.122.104:443";
      proxyWebsockets = true; # needed if you need to use WebSocket
      extraConfig =
        "proxy_ssl_verify off;" +
        "proxy_pass_header Authorization;" +
        "proxy_set_header        Host $host;" +
        "proxy_set_header        X-Real-IP $remote_addr;" +
        "proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;" +
        "proxy_set_header        X-Forwarded-Proto $scheme;" +
        "proxy_read_timeout      1800s;" +
        "proxy_send_timeout      1800s;" +
        "proxy_connect_timeout   1800s;" +
        "proxy_buffering         off;"
        ;
    };
  };
}