{ util, container, config, ... }: let address = "192.168.1.1"; domain = "router.${config.container.domain}"; port = 80; name = "router"; in { ${domain} = container.mkServer { extraConfig = util.trimTabs '' listen 443 ssl; set ''$${name} ${address}:${toString port}; location / { allow ${config.container.localAccess}; allow ${config.container.module.status.address}; allow ${config.container.module.vpn.address}; deny all; proxy_pass http://''$${name}$request_uri; } ssl_certificate /etc/letsencrypt/live/${config.container.domain}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/${config.container.domain}/privkey.pem; include /etc/letsencrypt/conf/options-ssl-nginx.conf; ssl_dhparam /etc/letsencrypt/conf/ssl-dhparams.pem; ''; }; }