znc.nix

{ pkgs, ... }:

{
  security.acme.certs."qyliss.net" = {
    email = "hi@alyssa.is";
    postRun = "systemctl reload nginx.service";
    webroot = "/var/lib/acme/acme-challenge";
  };

  services.nginx.enable = true;
  services.nginx.config = ''
    events {}

    stream {
      server {
        listen 6697 ssl;
        ssl_certificate /var/lib/acme/qyliss.net/fullchain.pem;
        ssl_certificate_key /var/lib/acme/qyliss.net/key.pem;
        proxy_pass 127.0.0.1:6667;
      }
    }
  '';

  services.znc.enable = true;
  services.znc.useLegacyConfig = false;
}