recommendedZstdSettings   = true;

  # nginx reverse proxy configuration

  };
  # temporarily
  services.nginx.virtualHosts.${domain} = lib.merge config.services.nginx.sslTemplate {
    locations."/".return = "404";