{
  security.acme.acceptTerms = true;
  security.acme.defaults.email = "dala@dalaran.fr";

  services.nginx = {
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;
  };
}