feat: add nginx config

configuration.nix

@@ -49,5 +49,13 @@
     linkConfig.RequiredForOnline = "routable";
   };
 
-  system.stateVersion = "23.11";
+  # NOTE: for now, we use internal ports
+  # TODO: switch to unixsockets if supported
+  services.nginx = {
+    enable = true;
+    recommendedGzipSettings = true;
+  };
+
+
+  system.stateVersion = "24.05";
 }

flake.nix

@@ -44,7 +44,7 @@
       let pkgs = nixpkgs.legacyPackages.${system};
       in {
         devShell = pkgs.mkShell {
-          buildInputs = with pkgs; [ colmena.packages.${system}.colmena ];
+          buildInputs = [ colmena.packages.${system}.colmena ];
         };
       });
 }

immich.nix

@@ -7,4 +7,11 @@
     machine-learning.enable = true;
     host = "localhost";
   };
+
+  services.nginx.virtualHosts."immich.rz01.infra.dgnum.eu" = {
+    enableACME = true;
+    forceSSL = true;
+    serverAliases = [];
+    locations."/".proxyPass = "http://localhost:3001/";
+  };
 }

photoprism.nix

@@ -17,4 +17,11 @@
 
     passwordFile = "/passwords/photoprism";
   };
+
+  services.nginx.virtualHosts."photoprism.rz01.infra.dgnum.eu" = {
+    enableACME = true;
+    forceSSL = true;
+    serverAliases = [];
+    locations."/".proxyPass = "http://localhost:2342/";
+  };
 }