Adds nginx web proxy to pegasi.

systems/x86_64-linux/pegasi/default.nix

@@ -44,6 +44,27 @@
 
   gg.users.admins = [ "mtxyz" "hive" "sasha" ];
 
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "acme.acct@mtxyz.me";
+  };
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts."mc.0w0.club" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8080";
+        extraConfig = ''
+          proxy_ssl_server_name on;
+        '';
+      };
+    };
+  };
+
   # NFS config
   users.users.anon = {
     isSystemUser = true;
@@ -68,8 +89,12 @@
   };
   networking.firewall = {
     enable = true;
-    allowedTCPPorts = [ 111 2049 4000 4001 4002 20048 42069 ];
-    allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 ];
+    # Syncthing - 22000
+    # NFS - 111 2049 4000 4001 4002 20048
+    # Podman - 42069/tcp
+    # Nginx - 80/tcp 443/tcp
+    allowedTCPPorts = [ 22000 111 2049 4000 4001 4002 20048 42069 80 443 ];
+    allowedUDPPorts = [ 22000 111 2049 4000 4001 4002 20048 ];
   };
 
   # Sets up ZFS mounts for homedirs and nfs mounts.