{ ... }:
{
  services.nginx.virtualHosts."nextcloud.grzb.de" = {
    forceSSL = true;
    enableACME = true;
    listen = [          {
        addr = "0.0.0.0";
        port = 80;
      }{
      addr = "localhost";
      port = 8443;
      ssl = true;
      proxyProtocol = true;
    }];
    locations."/" = {
      proxyPass = "http://nextcloud.vs.grzb.de:80";
    };
    locations."= /.well-known/carddav" = {
      return = "301 $scheme://$host/remote.php/dav";
    };
    locations."= /.well-known/caldav" = {
      return = "301 $scheme://$host/remote.php/dav";
      extraConfig = ''
        proxy_read_timeout 3600;
        proxy_request_buffering off;
      '';
    };
    extraConfig = ''
      client_max_body_size 4096m;
    '';
  };
}