{ ... }: let port = 3001; in { services.hedgedoc = { enable = true; settings = { protocolUseSSL = true; # scp =; # TODO domain = "docs.beta.rz.ens.wtf"; host = "127.0.0.1"; port = port; db = { dialect = "sqlite"; storage = "/var/lib/hedgedoc/db.hedgedoc.sqlite"; }; }; }; services.nginx = { virtualHosts = { "docs.beta.rz.ens.wtf" = { forceSSL = true; enableACME = true; locations = { "/" = { proxyPass = "http://127.0.0.1:${toString port}"; proxyWebsockets = true; }; }; }; }; }; }