{inputs, ...}: {
  services.nginx.virtualHosts."vault.vulpecula.zone" = {
    addSSL = true;
    enableACME = true;
    # root = ;
  };

  services.vaultwarden.enable = true;
  services.bitwarden-directory-connector-cli.domain = "vault.vulpecula.zone";
}