{ config, pkgs, ... }:

{
  services.nginx.virtualHosts."keys.stubbe.rocks" = {
      enableACME = true;
      forceSSL = true;
  };

  services.sks.enable = true;
  services.sks.extraDbConfig = "set_flags DB_LOG_AUTOREMOVE";
  networking.firewall.allowedTCPPorts = [ config.services.sks.hkpPort];
  services.pgpkeyserver-lite.enable = true;
  services.pgpkeyserver-lite.hostname = "keys.stubbe.rocks";
}