{ ... }:
let
  proxyIPv4 = "45.13.104.29";
in
{
  networking.firewall.allowedTCPPorts = [ 443 ];

  services.sniproxy = {
    enable = true;

    resolver = {
      mode = "ipv6_first";
    };

    listeners = [
      {
        address = "${proxyIPv4}:443";
        table = "vhosts";
        fallback = null;
      }
    ];

    tables.vhosts = [
      {
        match = "traque.beta.rz.ens.wtf";
        dest = "traque.beta.rz.ens.wtf";
      }
    ];
  };
}