basic nginx setup

configs/services/nginx.nix

@@ -0,0 +1,30 @@
+{ lib, pkgs, config, ... }:
+{
+  services.nginx = {
+    enable = true;
+
+    virtualHosts = {
+      "pve.infra.cdaut.de" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "https://10.0.0.254:8006";
+        };
+      };
+      "corerouter.infra.cdaut.de" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://10.0.0.1:80";
+        };
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "acme@cdaut.de";
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+}