{ domain, ... }:
{ lib, config, ... }:
let
  inherit (config.services) nginx;
  srv = "whoami";
in
{
  services.nginx = {
    virtualHosts."${srv}.${domain}" = {
      forceSSL = true;
      useACMEHost = domain;
      root = "/var/empty";
      extraConfig = ''
        access_log off;
        error_log  /var/log/nginx/${domain}/${srv}/error.log warn;
        keepalive_requests 0;
        default_type text/plain;
      '';
      locations."/addr".return = "200 $remote_addr\\n";
    };
  };
  systemd.services.nginx.serviceConfig.LogsDirectory = lib.mkForce [ "nginx/${domain}/${srv}" ];
}