From e529dffb9c0d5ccd945c4752446b72d0ae5a3966 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Sat, 15 Apr 2023 02:55:02 +0200
Subject: [PATCH] pulsebert: expose on pulsebert.hq.c3d2.de

---
 hosts/pulsebert/default.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/hosts/pulsebert/default.nix b/hosts/pulsebert/default.nix
index 9e3a93ad..f1b454d0 100644
--- a/hosts/pulsebert/default.nix
+++ b/hosts/pulsebert/default.nix
@@ -66,9 +66,9 @@
     domain = "hq.c3d2.de";
     firewall = {
       allowedTCPPorts = [
+        80 # ledfx
         4713 # pulseaudio/pipewire network sync
         5355 # llmnr
-        8888 # ledfx
       ];
       allowedUDPPorts = [
         5353 # mdns
@@ -189,6 +189,14 @@
           #   extraConfig = "proxy_pass_request_headers off;";
           # };
         };
+        "pulsebert.hq.c3d2.de" = {
+          enableACME = true;
+          forceSSL = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:8888";
+            proxyWebsockets = true;
+          };
+        };
       };
     };
 
@@ -208,7 +216,7 @@
     after = [ "pipewire.target" ];
     wantedBy = [ "default.target" ];
     serviceConfig = {
-      ExecStart = "${pkgs.ledfx}/bin/ledfx --host 0.0.0.0";
+      ExecStart = "${pkgs.ledfx}/bin/ledfx";
     };
   };