{ pkgs, ... }: { services.nginx.virtualHosts = { "acme-c3cat.de" = { enableACME = true; serverName = "c3cat.de"; listen = [ { addr = "0.0.0.0"; port = 31820; } ]; }; "c3cat.de" = { forceSSL = true; useACMEHost = "c3cat.de"; listen = [ { addr = "0.0.0.0"; port = 8443; ssl = true; proxyProtocol = true; } ]; locations."/" = { return = "302 https://wiki.hamburg.ccc.de/club:c3cat:start"; }; extraConfig = '' # Make use of the ngx_http_realip_module to set the $remote_addr and # $remote_port to the client address and client port, when using proxy # protocol. # First set our proxy protocol proxy as trusted. set_real_ip_from 172.31.17.140; # Then tell the realip_module to get the addreses from the proxy protocol # header. real_ip_header proxy_protocol; ''; }; }; }