{ ... }: {
  services.nginx.virtualHosts."lappy-dev.owo.monster" = {
    forceSSL = true;
    enableACME = true;
    locations = {
      "/".proxyPass =
        "http://lappy.tailscale-internal.genderfucked.monster:8088";
    };
  };
}