server:
  port: 80
  host: "0.0.0.0"

tls:
  enabled: true                       # ← was false, now true
  email: "den@2-4-h.net"              # ← Let's Encrypt account email

domain: "nextwks.eu"      # Base domain for subdomain routing + certs