{
  config,
  lib,
  ...
}:
with lib;
  mkIf config.services.nginx.enable {
    services.nginx = {
      recommendedProxySettings = true;
    };
    networking.firewall.allowedTCPPorts = [80 443];
  }