{ config, ... }:
{
  services.nginx.virtualHosts."turn.${config.domains.jim1}" = {
    enableACME = true;
    forceSSL = true;
    listen = [{
      addr = "0.0.0.0";
      port = 80;
      ssl = false; 
    }];
    locations."/".proxyPass = "http://127.0.0.1:1380";
  };

  security.acme.certs = {       
    "turn.${config.domains.jim1}" = {
      group = "turnserver";
      postRun = "systemctl restart coturn.service";
    };
  };
}