unfortunately Custom Domains don't seem to work with SSL yet, unclear why and it's way past zzz time
https://gist.github.com/kekru/c09dbab5e78bf76402966b13fa72b9d2 was quite helpful, this way you can split requests based on the domain name without having to terminate TLS
also SNI is really cool, and not that hard with Nginx? all there is to that really: https://git.pixie.town/f0x/nixos/src/branch/main/nodes/arx/configuration.nix#L150-L176