nixos/dafoe/services/nginx.nix

{ lib, pkgs, inputs, config, ... }:
{
  services.nginx = {
    enable = true;
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;
  };

  services.nginx.virtualHosts = let domain = "vatthauer.xyz"; in
  {
    "config.domains.gitURL" = {
      enableACME = true;
      forceSSL = true;
      locations."/" = {
        proxyPass = "http://localhost:3001/";
      };
    };
    "vaultwarden.${domain}" = {
      enableACME = true;
      forceSSL = true;
      locations."/" = {
        proxyPass = "http://localhost:8222/";
      };
    };
    "video.${domain}" = {
      enableACME = true;
      forceSSL = false;
      locations."/" = {
        proxyPass = "http://localhost:8096";
      };
    };
    "www.${domain}" = {
      serverAliases = [ domain ];
      forceSSL = true;
      enableACME = true;
      root = pkgs.callPackage ./resumee-website.nix {};
    };
    "files.${domain}" = {
      forceSSL = true;
      enableACME = true;
      locations."/" = {
        root = "/var/www";
        extraConfig = "autoindex on;";
      };
    };
    "cloud.${domain}" = {
      forceSSL = true;
      enableACME = true;
    };
  };
}