stable somewhat

hosts/thea/nginx.nix

@@ -29,16 +29,27 @@ in
 
     virtualHosts =
       let
-        mkVHost = host: port: {
-          "${host}" = {
-            enableACME = true;
-            forceSSL = true;
+        mkVHost =
+          {
+            host,
+            port,
+            target ? sin-address,
+          }:
+          {
+            "${host}" = {
+              enableACME = true;
+              forceSSL = true;
 
-            locations."/" = {
-              proxyPass = "http://${sin-address}:${toString port}";
+              locations."/" = {
+                proxyPass = "http://${target}:${toString port}";
+                extraConfig = ''
+                  proxy_set_header X-Real-IP $remote_addr;
+                  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+                  proxy_set_header X-Forwarded-Proto $scheme;
+                '';
+              };
             };
           };
-        };
         mkStarr = host: port: {
           "${host}" = {
             enableACME = true;
@@ -53,6 +64,8 @@ in
               proxyWebsockets = true;
               extraConfig = ''
                 proxy_ssl_server_name on;
+
+                proxy_read_timeout 4800s;
               '';
             };
             locations."/" = {
@@ -63,7 +76,6 @@ in
                 include ${authelia-snippets.authelia-authrequest};
 
                 proxy_ssl_server_name on;
-                proxy_read_timeout 4800s;
               '';
             };
           };
@@ -99,18 +111,45 @@ in
           ) vhost);
       in
       (
-        (withWebsockets (mkVHost "jellyfin.shobu.fr" "8096") "/")
+        (withWebsockets (mkVHost {
+          host = "jellyfin.shobu.fr";
+          port = "8096";
+          target = "127.0.0.1";
+        }) "/")
         // mkStarr "radarr.shobu.fr" "7878"
         // mkStarr "sonarr.shobu.fr" "8989"
         // mkStarr "prowlarr.shobu.fr" "9696"
         // mkStarr "bazarr.shobu.fr" "6767"
         // mkStarr "lidarr.shobu.fr" "8686"
         // mkStarr "whisparr.shobu.fr" "6969"
-        // mkVHost "jellyseerr.shobu.fr" "5055"
-        // withAuthelia (mkVHost "transmission.shobu.fr" "9091") "/"
-        // withAuthelia (mkVHost "zimablade-admin.shobu.fr" "61208") "/"
-        // withAuthelia (mkVHost "actual.shobu.fr" nodes.sin.config.services.actual.settings.port) "/"
-        // (withWebsockets (mkVHost "trilium.shobu.fr" "12783") "/")
+        // mkVHost {
+          host = "jellyseerr.shobu.fr";
+          port = "5055";
+        }
+        // withAuthelia (mkVHost {
+          host = "transmission.shobu.fr";
+          port = "13277";
+        }) "/"
+        // mkVHost {
+          host = "qbittorrent.shobu.fr";
+          port = "44160";
+        }
+        // withAuthelia (mkVHost {
+          host = "zimablade-admin.shobu.fr";
+          port = "61208";
+        }) "/"
+        // (mkVHost {
+          host = "actual.shobu.fr";
+          port = nodes.sin.config.services.actual.settings.port;
+        })
+        // (withWebsockets (mkVHost {
+          host = "trilium.shobu.fr";
+          port = "12783";
+        }) "/")
+        // mkVHost {
+          host = "invit.shobu.fr";
+          port = "5690";
+        }
         // {
           "shobu.fr" = {
             enableACME = true;