nixos on watcher

machines/kat-r86s/configuration.nix

@@ -114,6 +114,10 @@
         recommendedProxySettings = true;
         proxyPass = "http://192.168.122.2/";
       };
+      "traque.katvayor.net".locations."/" = {
+        recommendedProxySettings = true;
+        proxyPass = "http://192.168.122.4/";
+      };
     };
     streamConfig = ''
       upstream kat-virt {
@@ -123,18 +127,32 @@
         listen 22000;
         proxy_pass kat-virt;
       }
+      upstream kat-traque {
+        server 192.168.122.4:22;
+      }
+      server {
+        listen 22001;
+        proxy_pass kat-virt;
+      }
     '';
   };
 
   # Open ports in the firewall.
-  networking.firewall.allowedTCPPorts = [
-    22
-    53
-    80
-    443
-    22000
-  ];
-  networking.firewall.allowedUDPPorts = [ 67 ];
+  networking.firewall = {
+    allowedTCPPorts = [
+      22
+      53
+      80
+      443
+    ];
+    allowedTCPPortRanges = [
+      {
+        from = 22000;
+        to = 22100;
+      }
+    ];
+    allowedUDPPorts = [ 67 ];
+  };
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;