{
  config,
  lib,
  pkgs,
  ...
}: let
  serviceName = "it-tools";
  portUtils = import ../../../lib/port-utils.nix {inherit lib;};
  servicePort = portUtils.getPort serviceName "AZ-CLD-1";
in {
  services.nginx = {
    enable = true;
    virtualHosts.${serviceName} = {
      listen = [
        {
          addr = "127.0.0.1";
          port = servicePort;
        }
      ];
      locations."/" = {
        root = "${pkgs.it-tools}/lib";
        index = "index.html";
        tryFiles = "$uri $uri/ /index.html";
      };
    };
  };

  # Traefik configuration
  services.traefik.dynamicConfigOptions.http = {
    services.${serviceName}.loadBalancer.servers = [
      {
        url = "http://localhost:${toString servicePort}/";
      }
    ];

    routers.${serviceName} = {
      rule = "Host(`tools.az-gruppe.com`)";
      tls = {
        certResolver = "ionos";
      };
      service = serviceName;
      entrypoints = "websecure";
    };
  };
}