{
  services.nginx = {
    enable = true;

    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedTlsSettings = true;
  };

  users.extraUsers.nginx.extraGroups = [ "acme" ];

  imports = [
    ./acme.nix
  ];
}