{
  users.groups.ogdo = { members = [ "nginx" "jaina" ]; };
  services.nginx = {
    enable = true;

    # ꙮ.run
    virtualHosts."xn--xx8a.run" = {
      listen = [
        {
          addr = "0.0.0.0";
          port = 80;
        }
        {
          port = 80;
          addr = "[::]";
        }
        # deliberately avoid listening with https
      ];

      rejectSSL = true;
      root = "/srv/ogdo";

      extraConfig = ''
        error_page 404 /;
      '';

      locations."/" = { index = "/index.html"; };

      locations."/v" = { tryFiles = "/Ogdo-V-corrected.pdf =404"; };
      locations."/iv" = { tryFiles = "/Ogdo-IV.pdf =404"; };
      locations."/1031" = { tryFiles = "/Halloween-special-updated.pdf =404"; };
    };
  };
}