{ pkgs, ... }: {
	networking.firewall.allowedTCPPorts = [ 443 ];

	services.caddy = {
		enable = true;

		package = pkgs.caddy.withPlugins {
			plugins = [ "github.com/aksdb/caddy-cgi/v2@v2.2.7" ];
			hash = "sha256-0JbPUml6UF81Tmj+wrbOPvOfuKgXCt/4g3R7fBkOGNs=";
		};
	};
}