feat(nginx): Add default real_ip decoding for all vhosts

machines/compute01/pages.nix

@@ -36,7 +36,18 @@ let
 in
 
 {
+  options.services.nginx.virtualHosts = lib.mkOption {
+    type = lib.types.attrsOf (
+      lib.types.submodule {
+        config.extraConfig = ''
+          real_ip_header proxy_protocol;
+          set_real_ip_from 127.0.0.1;
+        '';
+      }
+    );
+  };
 
+  config = {
     systemd.services.codeberg-pages = {
       inherit environment;
       description = "Codeberg pages server";
@@ -81,6 +92,7 @@ in
           ssl = false;
         }
       ];
+
       streamConfig = ''
         map $ssl_preread_server_name $sni_upstream {
           default 127.0.0.1:8010;
@@ -97,9 +109,7 @@ in
           proxy_pass $sni_upstream;
           proxy_protocol on;
         }
-
       '';
-    defaultSSLListenPort = 8446;
     };
-
+  };
 }