flake/modules/nixos/server/nginx.nix

{ pkgs, lib, config, ... }: {
  options.mods.server.nginx = {
    enable = lib.mkEnableOption {
      default = false;
      description = "enables nginx reverse proxy";
    };
  };

  config = lib.mkIf config.mods.server.nginx.enable {
    services.nginx = {
      recommendedProxySettings = true;
      virtualHosts."*.muon.host" = {
        locations."/" = {
          proxyPass = "http://100.112.114.27:443";
          proxyWebsockets = true; # needed if you need to use WebSocket
          extraConfig = "proxy_ssl_server_name on;";
        };
      };
    };
  };
}