nixos-config/modules/services/guacamole.nix

{ config, pkgs, ... }:
{
  services = {
    guacamole-server = {
      enable = false;
      package = pkgs.guacamole-server;
      host = "127.0.0.1";
      port = 4822;
      userMappingXml = ./guacamole-user-mapping.xml;
    };
    guacamole-client = {
      enable = false;
      package = pkgs.guacamole-client;
      enableWebserver = false;
      settings = {
        guacd-port = 4822;
        guacd-hostname = "localhost";
      };
    };
    #anubis.instances.guacamole = {
    #  settings = {
    #    TARGET = "http://localhost:4822";
    #    BIND = "/run/anubis/anubis-guacamole/anubis.sock";
    #    METRICS_BIND = "/run/anubis/anubis-guacamole/anubis.sock";
    #  };
    #};
    nginx.virtualHosts."remote.liv.town" = {
      forceSSL = true;
      sslCertificate = "/var/lib/acme/liv.town/cert.pem";
      sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
      locations."/" = {
        # proxyPass = "http://unix:${toString config.services.anubis.instances.guacamole.settings.BIND}";
        proxyPass = "http://${toString config.services.guacamole-server.host}:${toString config.services.guacamole-server.port}";
        proxyWebsockets = true;
      };
    };
  };
}