nix-config/modules/data-hoarder/socket.nix

{ config, ... }:
let
  service_number = 2;
in
{
  TLMS.funnel = {
    enable = true;
    GRPC = {
      host = "127.0.0.1";
      port = 50050 + service_number;
    };
    defaultWebsocket = {
      host = "127.0.0.1";
      port = 9000 + service_number;
    };
    metrics = {
      port = 10010 + service_number ;
      host = config.deployment-TLMS.net.wg.addr4;
    };
  };
  services = {
    nginx = {
      enable = true;
      recommendedProxySettings = true;
      virtualHosts = {
        "socket.${(builtins.replaceStrings [ "tlm.solutions" ] [ "dvb.solutions" ] config.deployment-TLMS.domain)}" = {
          enableACME = true;
          forceSSL = true;
          locations."/" = {
            proxyWebsockets = true;
            proxyPass = with config.TLMS.funnel.defaultWebsocket; "http://${host}:${toString port}/";
          };
        };
        "socket.${config.deployment-TLMS.domain}" = {
          forceSSL = true;
          enableACME = true;
          locations = {
            "/" = {
              proxyPass = with config.TLMS.funnel.defaultWebsocket; "http://${host}:${toString port}/";
              proxyWebsockets = true;
            };
          };
        };
      };
    };
  };
}