{ ... }: {

  security.acme.acceptTerms = true;
  security.acme.defaults.email = "security@sortug.com";
  users.users.y.homeMode = "750";
  services.nginx = {
    enable = true;
    virtualHosts."old.sortug.com" =  {
      enableACME = true;
      forceSSL = true;
      locations."/" = {
        proxyPass = "http://127.0.0.1:9000";
        proxyWebsockets = true; # needed if you need to use WebSocket
        extraConfig = ''
         proxy_set_header Host $Host;
        '';
        # actually important
      };
    };
  };
}