{config, ...}: let
  torDomain = "tor.${config.customOps.domain.fqdn}";
in {
  services.nginx.virtualHosts.${torDomain} = {
    root = "/var/www/${torDomain}";
    forceSSL = true;
    enableACME = true;
    locations."~ \\.php$".extraConfig = ''
      fastcgi_pass  unix:${config.services.phpfpm.pools.mypool.socket};
      fastcgi_index index.php;
    '';
  };
}