{
  config,
  ...
}:
let
  newDomain = config.networking.domain;
  oldDomain = "alanpearce.eu";
in
{
  security.acme = {
    certs."${oldDomain}" = {
      extraDomainNames = [ "*.${oldDomain}" ];
    };
  };

  services.caddy.virtualHosts = {
    "*.${oldDomain}" = {
      useACMEHost = "${oldDomain}";
      extraConfig = ''
        redir https://{labels.2}.${newDomain}{uri}
      '';
    };
  };
}