nixos/services/caddy.nix

{ ... }: {
  networking.firewall.allowedTCPPorts = [ 80 443 ];
  services.caddy = {
    enable = true;
    email = "evie@xenia.me.uk";
    virtualHosts."xenia.me.uk".extraConfig = ''
      file_server * {
        root /var/www/homesite/
      }
    '';
  };
  services.fail2ban = {
    enable = true;
    ignoreIP = [ "127.0.0.1/8" "::1" "192.168.1.0/16" ];
    bantime-increment = { enable = true; };
  };
}