Still have to configure nginx, systemd and run certbot. But that's a strict subset of what you have to do for mastodon, I also know from experience :-)

And the needed config is simpler.

Sounds like something to add to nixos. 

 you don't need TLS for a nostr relay  

 And reveal to half the internet what all connected clients are interested in? 

 good answer 

 I let cloudflare terminate tls on the damus relay. Im lazy and it’s all public data. I don’t even run nginx. 

 fwiw this is my configuration right now, maybe it helps: https://gist.github.com/laanwj/a16497ba8b30511b3827e2e733190e5d