_: let
  dom = "min.rip"; # TODO: hardcoding
in {
  services.nginx.virtualHosts.${dom} = {
    forceSSL = true;
    enableACME = true;

    quic = true;

    locations."/" = {
      return = ''200 "hi!"'';
      extraConfig = ''
        add_header Cache-Control "max-age=15552000, must-revalidate";
        add_header Content-type text/plain;

        # advertise http3
        add_header Alt-Svc 'h3=":$server_port"; ma=86400';
      '';
    };

    locations."/robots.txt" = {
      priority = 10000;
      return = ''200 "User-Agent: ia_archiver\nDisallow: /"'';
      extraConfig = ''
        add_header Content-Type text/plain;
      '';
    };
  };
}