Initial commit

hosts/cryodev-main/services/headscale.nix

@@ -0,0 +1,32 @@
+{
+  config,
+  pkgs,
+  outputs,
+  constants,
+  ...
+}:
+
+{
+  imports = [
+    outputs.nixosModules.headscale
+  ];
+
+  services.headscale = {
+    enable = true;
+    address = "127.0.0.1";
+    port = constants.services.headscale.port;
+    settings = {
+      server_url = "https://${constants.services.headscale.fqdn}";
+      dns_config.base_domain = constants.domain;
+    };
+  };
+
+  services.nginx.virtualHosts."${constants.services.headscale.fqdn}" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${toString constants.services.headscale.port}";
+      proxyWebsockets = true;
+    };
+  };
+}