{...}: {
  imports = [./default.nix ./sshd.nix];
  services.traefik.dynamicConfigOptions = {
    http = {
      routers.gitea = {
        rule = "Host(`git.xenia.me.uk`)";
        entryPoints = ["http" "https"];
        service = "gitea-websecure";
        tls = {certResolver = "default";};
      };
      services.gitea-websecure.loadBalancer.servers = [{url = "http://localhost:3000";}];
    };
    tcp = {
      routers.gitea-ssh = {
        rule = "HostSNI(`git.xenia.me.uk`)";
        entryPoints = ["ssh" "https"];
        service = "ssh-redirect";
        tls = {certResolver = "default";};
      };
    };
  };
}