From 201f1346ca62b7e34ad90e77d54b43fc7cd78ca0 Mon Sep 17 00:00:00 2001
From: Aly Raffauf <aly@raffauflabs.com>
Date: Mon, 7 Oct 2024 18:54:14 -0400
Subject: [PATCH] slateport: reverse proxy to immich on mauville

---
 hosts/slateport/raffauflabs.nix | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/hosts/slateport/raffauflabs.nix b/hosts/slateport/raffauflabs.nix
index 0079ab31..fbcf4c11 100644
--- a/hosts/slateport/raffauflabs.nix
+++ b/hosts/slateport/raffauflabs.nix
@@ -22,6 +22,7 @@ in {
         "git.${domain}"
         "music.${domain}"
         "passwords.${domain}"
+        "pics.${domain}"
         "plex.${domain}"
         "podcasts.${domain}"
         domain
@@ -238,6 +239,26 @@ in {
           };
         };
 
+        "pics.${domain}" = {
+          enableACME = true;
+          forceSSL = true;
+
+          locations."/" = {
+            proxyPass = "http://${ip}:${toString 3001}";
+
+            extraConfig = ''
+              client_max_body_size 5000M;
+              proxy_buffering off;
+              proxy_redirect                      http:// https://;
+              proxy_set_header Host               $host;
+              proxy_set_header X-Forwarded-Proto  $scheme;
+              proxy_set_header Connection         "upgrade";
+              proxy_set_header Upgrade            $http_upgrade;
+              proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
+            '';
+          };
+        };
+
         "plex.${domain}" = {
           enableACME = true;
           forceSSL = true;