{ config, pkgs, ... }: {
  my.services = {
    monitoring = {
      node-exporter.enable = true;
      promtail.enable = true;
    };
  };

  services.nginx = {
    streamConfig = ''
      server {
        listen 443;
        proxy_timeout 2s;
        proxy_pass 192.168.0.40:443;
      }

      server {
        listen 80 reuseport;
        proxy_timeout 2s;
        proxy_pass 192.168.0.40:80;
      }
    '';
  };
  networking.firewall.allowedTCPPorts = [ 80 443 ];
}