{ ... }:
{
  root = "/var/www/voidpkgs"; # TODO: make declarative

  locations."/" = {
    extraConfig = ''
      try_files $uri $uri/ =404;
      sendfile on;
      sendfile_max_chunk 1m;
      autoindex on;
    '';
  };

  # https
  enableACME = true;
  forceSSL = true;
}