{
  services.caddy = {
    enable = true;

    virtualHosts = {
      "mayu.due.moe".extraConfig = "reverse_proxy localhost:8098";
      "counter.due.moe".extraConfig = "reverse_proxy localhost:8098";
      "bin.fuwn.me".extraConfig = "reverse_proxy localhost:8090";

      "fuwn.me".extraConfig = ''
        reverse_proxy localhost:8084

        header Onion-Location http://fuwnme4wbs5x36jjf2usedw2zscozwhazykhyfkjsmudtb7egs3mb7yd.onion{path}

        @blocked {
          path /proxy/illegaldrugs.net/cgi-bin/news.php*
          path /proxy/scholasticdiversity.us.to/scriptures/*
          path /proxy/jsreed5.org/oeis/*
        }
        respond @blocked 403

        @no_forwarded_for not header X-Forwarded-For *
        request_header @no_forwarded_for X-Forwarded-For {remote_host}
        respond /whoami {header.X-Forwarded-For} 200
      '';
    };
  };
}