{config, ...}: let
  domain = config.customOps.domain.fqdn;
in {
  services.nginx.virtualHosts."cpcheck.${domain}" = {
    extraConfig = ''
      access_log off;
      error_log /dev/null;
    '';
    locations."/".return = 204;
    forceSSL = false;
    addSSL = true;
    enableACME = true;
  };
}