{ ... }: { systemd.tmpfiles.rules = [ "d /var/www/blog 0755 ellie nginx -" ]; services.nginx.virtualHosts."ellie.town" = { enableACME = true; forceSSL = true; root = "/var/www/blog"; locations."/" = { index = "index.html"; }; }; }