infrastructure/machines/web01/metis/default.nix

{
  lib,
  pkgs,
  sources,
  ...
}:

let
  metis = import sources.metis { inherit pkgs; };

  inherit (metis) providers;
in
{
  services.nginx.virtualHosts."calendrier.dgnum.eu" = {
    enableACME = true;
    forceSSL = true;
    root = metis.production;

    locations = lib.mapAttrs' (
      name: value:
      lib.nameValuePair "/cal/${name}/" {
        extraConfig = ''
          proxy_set_header X-Forwarded-Host $host;
          proxy_set_header X-Forwarded-Server $host;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass ${value};
        '';
      }
    ) providers;

    extraConfig = ''
      rewrite ^/calendrier(.*)$ $1 permanent;
    '';
  };
}