{
  inputs,
  constants,
  config,
  ...
}:

let
  cfg = config.services.nginx;
in
{
  imports = [
    inputs.synix.nixosModules.nginx
  ];

  systemd.tmpfiles.rules = [
    "d /var/www 0755 gitea-runner ${cfg.group} -"
  ];

  systemd.services.gitea-runner-default.serviceConfig = {
    ReadWritePaths = [ "/var/www" ];
  };

  services.nginx = {
    enable = true;
    openFirewall = false;
    forceSSL = false;

    virtualHosts = {
      "${constants.services.docs.fqdn}" = {
        locations."/" = {
          root = "/var/www/doc";
        };
      };
    };
  };
}