Configure Nginx virtual host for paperless-ngx

hosts/nixedo/modules/acme.nix

@@ -21,6 +21,7 @@
           "jellyfin.oliverdavies.uk"
           "luke.oliverdavies.uk"
           "nixedo.oliverdavies.uk"
+          "paperless.oliverdavies.uk"
           "phpsw-sculpin-demo.oliverdavies.uk"
           "rebuilding-acquia.oliverdavies.uk"
           "rebuilding-bartik.oliverdavies.uk"

hosts/nixedo/modules/paperless.nix

@@ -1,21 +1,38 @@
 { config, ... }:
 
 {
-  services = {
+  services =
-    paperless = {
+    let
-      enable = true;
+      cfg = config.services.paperless;
+      hostname = "paperless.oliverdavies.uk";
+    in
+    {
+      paperless = {
+        enable = true;
 
-      dataDir = "/mnt/media/paperless";
+        dataDir = "/mnt/media/paperless";
 
-      settings = {
+        settings = {
-        PAPERLESS_URL = "https://paperless.oliverdavies.uk";
+          PAPERLESS_URL = "https://${hostname}";
+        };
+      };
+
+      nginx.virtualHosts."${hostname}" = {
+        forceSSL = true;
+        useACMEHost = "oliverdavies.uk";
+
+        locations."/" = {
+          proxyPass = "http://localhost:${toString cfg.port}";
+
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Host $http_host;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Protocol $scheme;
+            proxy_set_header X-Real-IP $remote_addr;
+          '';
+        };
       };
     };
-
-    caddy.virtualHosts."${config.services.paperless.settings.PAPERLESS_URL}" = {
-      useACMEHost = "oliverdavies.uk";
-
-      extraConfig = "reverse_proxy localhost:28981";
-    };
-  };
 }