nginx

host/roam/services.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ var, config, ... }:
 let
   headscale-domain = "headscale.hdohmen.de";
 in
@@ -6,6 +6,24 @@ in
   services = {
     nginx = {
       enable = true;
+      defaultListen = [
+        {
+          addr = var.wg.ips.roam;
+          ssl = true;
+        }
+      ];
+      virtualHosts."roam.lan" = {
+        locations."/" = { };
+      };
+      virtualHostsPub."roam.hdohmen.de" = {
+        enableACME = true;
+        locations."/" = { };
+      };
+    };
+
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
     };
   };