From 865ee68a69b248473e1e839888e573d5504629a5 Mon Sep 17 00:00:00 2001
From: Frank LoTurco <floturcocantsee@protonmail.com>
Date: Thu, 20 Aug 2026 22:41:51 -0400
Subject: [PATCH] vergil: add reverse proxy

---
 hosts/vergil/configuration.nix | 36 ++++++++++++++++++++++++----------
 1 file changed, 26 insertions(+), 10 deletions(-)

diff --git a/hosts/vergil/configuration.nix b/hosts/vergil/configuration.nix
index bf7f8c5..46117ca 100644
--- a/hosts/vergil/configuration.nix
+++ b/hosts/vergil/configuration.nix
@@ -28,6 +28,22 @@ in
   };
 
   services = {
+    nginx = {
+      enable = true;
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts = {
+        "jellyfin.cfl.rr.com" = {
+          locations."/" = {
+            proxyPass = "http://localhost:8096";
+          };
+        };
+      };
+    };
+
     pihole-ftl = {
       enable = true;
       openFirewallDNS = true;
@@ -50,15 +66,6 @@ in
       };
     };
 
-    resolved = {
-      settings = {
-        Resolve = {
-          DNSStubListener = false;
-          MulticastDNS = false;
-        };
-      };
-    };
-
     jellyfin = {
       enable = true;
       openFirewall = true;
@@ -70,5 +77,14 @@ in
     multipath-tools
   ];
 
-  networking.hostName = "vergil";
+  networking = {
+    hostName = "vergil";
+
+    firewall = {
+      allowedTCPPorts = [
+        80
+        443
+      ];
+    };
+  };
 }