{inputs, ...}: {
  services.nginx.virtualHosts."vault.vulpecula.zone" = {
    addSSL = true;
    enableACME = true;
    # root = ;
  };

  services.vaultwarden.enable = true;
}