{config, ...}: let
  torDomain = "tor.${config.customOps.domain.fqdn}";
in {
  services.nginx.virtualHosts.${torDomain} = {
    root = "/var/www/${torDomain}";
    forceSSL = true;
    enableACME = true;
  };
}