@ironicbadger I was an haproxy guy, but I've recently found a lot of success in using NixOS's declarative nginx configs + acme wildcard certificates. I don't have the config posted anywhere, but let me know if you're interested and I'll share it out!