From 33473bba66822490007007374de3f59021aa8f1e Mon Sep 17 00:00:00 2001
From: muon <admin@muon.host>
Date: Fri, 1 Aug 2025 12:02:44 +0000
Subject: [PATCH] Add nvr to nginx

---
 hosts/mups/configuration.nix | 5 +++++
 modules/nixos/server/nvr.nix | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/hosts/mups/configuration.nix b/hosts/mups/configuration.nix
index 8596441..24fe51b 100644
--- a/hosts/mups/configuration.nix
+++ b/hosts/mups/configuration.nix
@@ -55,6 +55,11 @@ in {
       default = true;
       locations."/" = { proxyPass = "http://localhost:8008"; };
     };
+    "nvr.muon.host" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = { proxyPass = "http://10.0.0.2:8095"; };
+    };
     "tetterodesportcomplex.nl" = {
       enableACME = true;
       forceSSL = true;
diff --git a/modules/nixos/server/nvr.nix b/modules/nixos/server/nvr.nix
index 130ccb8..dfb2678 100644
--- a/modules/nixos/server/nvr.nix
+++ b/modules/nixos/server/nvr.nix
@@ -13,9 +13,9 @@ in with lib; {
   };
 
   config = mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = [ 8095 ];
     services.zoneminder = {
       enable = true;
+      openFirewall = true;
       database = {
         createLocally = true;
         username = "zoneminder";