From d99ccdbd0c594b4c952b7d9c560c9c20de56e770 Mon Sep 17 00:00:00 2001
From: Ivan Malison <IvanMalison@gmail.com>
Date: Fri, 22 May 2026 05:02:03 -0700
Subject: [PATCH] nixos: proxy rocket-sense on railbird-sf

---
 nixos/machines/railbird-sf.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/nixos/machines/railbird-sf.nix b/nixos/machines/railbird-sf.nix
index 33fa9f20..94d4147b 100644
--- a/nixos/machines/railbird-sf.nix
+++ b/nixos/machines/railbird-sf.nix
@@ -98,6 +98,21 @@
     };
   };
 
+  services.nginx.virtualHosts."rocket-sense.duckdns.org" = {
+    enableACME = true;
+    forceSSL = true;
+    serverAliases = ["rbsf.tplinkdns.com"];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:30080";
+      proxyWebsockets = true;
+      extraConfig = ''
+        client_max_body_size 200m;
+        proxy_read_timeout 300s;
+        proxy_connect_timeout 75s;
+      '';
+    };
+  };
+
   # Open the standard Syncthing sync/discovery ports on the host firewall.
   # Note: you may still need router/NAT port-forwards for inbound access from the internet.
   services.syncthing.openDefaultPorts = true;