vergil: add reverse proxy

hosts/vergil/configuration.nix

@@ -28,6 +28,22 @@ in
   };
 
   services = {
+    nginx = {
+      enable = true;
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts = {
+        "jellyfin.cfl.rr.com" = {
+          locations."/" = {
+            proxyPass = "http://localhost:8096";
+          };
+        };
+      };
+    };
+
     pihole-ftl = {
       enable = true;
       openFirewallDNS = true;
@@ -50,15 +66,6 @@ in
       };
     };
 
-    resolved = {
-      settings = {
-        Resolve = {
-          DNSStubListener = false;
-          MulticastDNS = false;
-        };
-      };
-    };
-
     jellyfin = {
       enable = true;
       openFirewall = true;
@@ -70,5 +77,14 @@ in
     multipath-tools
   ];
 
-  networking.hostName = "vergil";
+  networking = {
+    hostName = "vergil";
+
+    firewall = {
+      allowedTCPPorts = [
+        80
+        443
+      ];
+    };
+  };
 }