{...}: {
  services.xray-3x-ui = {
    enable = true;
    port = 2053;
    openFirewall = false;
  };
  networking.firewall.allowedTCPPorts = [45544 22];
  services.traefik.dynamicConfigOptions.http = {
    routers.xray = {
      rule = "Host(`v2.kittykat.poggerer.xyz`)";
      entryPoints = ["websecure"];
      service = "xray";
      tls = {
        certResolver = "letsencrypt";
      };
    };

    services.xray = {
      loadBalancer = {
        servers = [
          {url = "http://127.0.0.1:2053";}
        ];
      };
    };
  };
}