nix-infra/hosts/hydra/nginx.nix

{ ... }:
{
  services.nginx = {
    enable = true;
    virtualHosts = {
      "hydra.nekover.se" = {
        forceSSL = true;
        enableACME = true;
        listen = [{
          addr = "0.0.0.0";
          port = 80;
        }];
        locations."/" = {
          proxyPass = "http://localhost:3001";
        };
        extraConfig = ''
          listen 0.0.0.0:8443 http2 ssl proxy_protocol;

          set_real_ip_from 10.202.41.100;
          real_ip_header proxy_protocol;
        '';
      };
      "nix-cache.nekover.se" = {
        forceSSL = true;
        enableACME = true;
        listen = [        {
          addr = "0.0.0.0";
          port = 80;
        }];
        locations."/" = {
          proxyPass = "http://localhost:5005";
        };
        extraConfig = ''
          listen 0.0.0.0:8443 http2 ssl proxy_protocol;

          set_real_ip_from 10.202.41.100;
          real_ip_header proxy_protocol;
        '';
      };
    };
  };
}