nixos/willem/services/nginx.nix

{ lib, pkgs, inputs, ... }:
{
  services.nginx = {
    enable = true;
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;
  };

  services.nginx.virtualHosts."git.vatthauer.xyz" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://localhost:3001/";
    };
  };

  services.nginx.virtualHosts."bitwarden.vatthauer.xyz" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://localhost:8222/";
    };
  };

  services.nginx.virtualHosts."video.vatthauer.xyz" = {
    enableACME = true;
    forceSSL = false;
    locations."/" = {
      proxyPass = "http://localhost:8096";
    };
  };
  services.nginx.virtualHosts."vatthauer.xyz" = {
    forceSSL = true;
    enableACME = true;
    root = pkgs.callPackage ./resumee-website.nix {};
  };
  services.nginx.virtualHosts."files.vatthauer.xyz" = {
    forceSSL = true;
    enableACME = true;
    root = "/var/www";
  };
}