1 files changed, 60 insertions, 0 deletions
diff --git a/modules/nixos/hellohtml.linus.onl/default.nix b/modules/nixos/hellohtml.linus.onl/default.nix
new file mode 100644
index 0000000..f4a110e
--- /dev/null
+++ b/modules/nixos/hellohtml.linus.onl/default.nix
@@ -0,0 +1,60 @@
+{
+  lib,
+  config,
+  ...
+}: let
+  inherit (lib) mkEnableOption mkIf;
+
+  cfg = config.modules."hellohtml.linus.onl";
+in {
+  options.modules."hellohtml.linus.onl" = {
+    enable = mkEnableOption "hellohtml.linus.onl site";
+
+    useACME = mkEnableOption "built-in HTTPS stuff";
+  };
+
+  config = mkIf cfg.enable {
+    # Start service listening on socket /tmp/hellohtml.sock
+    services.hellohtml = {
+      enable = true;
+    };
+
+    # Register domain name.
+    services.cloudflare-dyndns.domains = ["hellohtml.linus.onl"];
+
+    # Use NGINX as reverse proxy.
+    services.nginx.virtualHosts."hellohtml.linus.onl" = {
+      enableACME = cfg.useACME;
+      forceSSL = cfg.useACME;
+      locations."/" = rec {
+        proxyPass = "http://localhost:8538";
+        # Disable settings that might mess with the text/event-stream response of the /listen/:id endpoint.
+        # NOTE: These settings work in tanden with Cloudflare Proxy settings descibed here:
+        #       https://blog.devops.dev/implementing-server-sent-events-with-fastapi-nginx-and-cloudflare-10ede1dffc18
+        extraConfig = ''
+            location /listen/ {
+              # Have to duplicate this here, as this directive is not inherited.
+              # See: https://blog.martinfjordvald.com/understanding-the-nginx-configuration-inheritance-model/
+              # See: https://serverfault.com/q/1082562
+              proxy_pass ${proxyPass};
+              # Disable connection header.
+              # See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Connection
+              # See: https://www.nginx.com/blog/avoiding-top-10-nginx-configuration-mistakes/#no-keepalives
+              proxy_set_header Connection \'\';
+              # Disable buffering. This is crucial for SSE to ensure that
+              # messages are sent immediately without waiting for a buffer to
+              # fill.
+              proxy_buffering off;
+              # Disable caching to ensure that all messages are sent and received
+              # in real-time without being cached by the proxy.
+              proxy_cache off;
+              # Set a long timeout for reading from the proxy to prevent the
+              # connection from timing out. You may need to adjust this value
+              # based on your specific requirements.
+              proxy_read_timeout 86400;
+            }
+        '';
+      };
+    };
+  };
+}