From 58e4e735dc3aeee71e4c1a87c88b9e7edbbd4b84 Mon Sep 17 00:00:00 2001
From: Ahwx <ahwx@ahwx.org>
Date: Sun, 3 Aug 2025 12:17:11 +0200
Subject: [PATCH] feat: enable `nix-serve` for local devices

---
 modules/services/nix-serve.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 modules/services/nix-serve.nix

diff --git a/modules/services/nix-serve.nix b/modules/services/nix-serve.nix
new file mode 100644
index 0000000..06fcdfc
--- /dev/null
+++ b/modules/services/nix-serve.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+{
+  services = {
+    nix-serve = {
+      enable = true;
+      secretKeyFile = "/var/secrets/cache-private-key.pem";
+    };
+
+    nginx.virtualHosts."violet.booping.local" = {
+      forceSSL = false;
+      # sslCertificate = "/var/lib/acme/liv.town/cert.pem";
+      # sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
+      locations."/" = {
+        proxyPass = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
+      };
+    };
+  };
+}