too lazy to think of a message, so enjoy this pointless text. Good luck future me...

clanServices/zitadel/default.nix

@@ -130,21 +130,19 @@ in
           ];
         };
 
-        services.caddy = {
+        services.nginx = {
           enable = true;
+
           virtualHosts = {
-            "auth.amarth.cloud".extraConfig = ''
+            "auth.amarth.cloud" = {
-              reverse_proxy h2c://127.0.0.1:9092
+              enableACME = true;
-            '';
+              forceSSL = true;
+
+              locations."/" = {
+                proxyPass = "h2c://127.0.0.1:9092";
+              };
+            };
           };
-          extraConfig = ''
-            (auth-z) {
-              forward_auth h2c://127.0.0.1:9092 {
-                uri /api/authz/forward-auth
-                copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
-              }
-            }
-          '';
         };
       };
     };