{ flake, ... }:
let
  inherit (flake.config.services.instances) actual web;
  service = actual;
  localhost = web.localhost.address1;
in
{
  services = {
    actual = {
      enable = true;
      settings = {
        port = service.ports.port0;
        hostname = localhost;
      };
    };
  };
  networking = {
    firewall = {
      allowedTCPPorts = [
        service.ports.port0
      ];
    };
  };
}