nix-infra/hosts/hydra/nginx.nix

{ ... }:
{
  services.nginx = {
    enable = true;
    virtualHosts = {

      "hydra.nekover.se" = {
        forceSSL = true;
        enableACME = true;
        listen = [{
          addr = "127.0.0.1";
          port = 1234;
        }{
          addr = "0.0.0.0";
          port = 8443;
          ssl = true;
          proxyProtocol = true;
        }];
        locations."/" = {
          proxyPass = "http://localhost:3001";
        };
      };

      "nix-cache.nekover.se" = {
        forceSSL = true;
        enableACME = true;
        listen = [{
          addr = "127.0.0.1";
          port = 1234;
        }{
          addr = "0.0.0.0";
          port = 8443;
          ssl = true;
          proxyProtocol = true;
        }];
        locations."/" = {
          proxyPass = "http://localhost:5005";
        };
      };
      
    };
  };
}