{ config, pkgs, ... }: {
  services.nginx = {
    streamConfig = ''
      server {
        listen 443;
        proxy_timeout 2s;
        proxy_pass 192.168.6.40:443;
      }

      server {
        listen 80 reuseport;
        proxy_timeout 2s;
        proxy_pass 192.168.6.40:80;
      }
    '';
  };
  networking.firewall.allowedTCPPorts = [ 80 443 ];
}