infrastructure/machines/web01/metis/default.nix

{ lib, pkgs, sources, ... }:

let
  metis = import sources.metis { inherit pkgs; };

  inherit (metis) providers;
in {
  services.nginx.virtualHosts."calendrier.dgnum.eu" = {
    enableACME = true;
    forceSSL = true;
    root = metis.production;

    locations = lib.mapAttrs' (name: value:
      lib.nameValuePair "/cal/${name}/" {
        extraConfig = ''
          proxy_set_header X-Forwarded-Host $host;
          proxy_set_header X-Forwarded-Server $host;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass ${value};
        '';
      }) providers;

    extraConfig = ''
      rewrite ^/calendrier(.*)$ $1 permanent;
    '';
  };
}