Add a module for heimdall

modules/heimdall/default.nix

@@ -0,0 +1,38 @@
+{ ... }:
+{
+  virtualisation.oci-containers = {
+    backend = "docker";
+    containers."heimdall" = {
+      image = "linuxserver/heimdall";
+      autoStart = true;
+      environment = {
+        TZ = "Europe/Zurich";
+        PUID = "1000";
+        PGID = "100";
+      };
+      ports = [
+        "8081:80"
+      ];
+      extraOptions = [
+        ''--mount=type=volume,source=heimdall,target=/config,volume-driver=local,volume-opt=type=nfs,volume-opt=device=:/server_data/heimdall,"volume-opt=o=addr=10.7.89.108,rw,nfsvers=4.0,nolock,hard,noatime"
+''
+      ];
+    };
+  };
+
+  services.nginx.virtualHosts."heimdall.2li.ch" = {
+    enableACME = true;
+    forceSSL = true;
+    listen = [{
+      port = 4433;
+      addr = "
+        127.0.0.1";
+      ssl = true;
+    }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8081";
+      proxyWebsockets = true; # needed if you need to use WebSocket
+    };
+  };
+}
+

systems/proxy/default.nix

@@ -11,6 +11,7 @@
     "${inputs.self}/modules/nginx-acme-base"
     "${inputs.self}/modules/docker"
     "${inputs.self}/modules/haproxy"
+    "${inputs.self}/modules/heimdall"
     "${inputs.self}/modules/rss-bridge"
   ];
 
@@ -53,15 +54,6 @@
           proxyWebsockets = true; # needed if you need to use WebSocket
         };
       };
-      "heimdall.2li.ch" = {
-        enableACME = true;
-        forceSSL = true;
-        listen = [{ port = 4433; addr = "127.0.0.1"; ssl = true; }];
-        locations."/" = {
-          proxyPass = "http://127.0.0.1:8081";
-          proxyWebsockets = true; # needed if you need to use WebSocket
-        };
-      };
     };
   };
 }