WIP | unifi

hosts/fred/default.nix

@@ -14,6 +14,7 @@
     ../themes.nix
     ./podman.nix
     ../server/searxng.nix
+    ../server/unifi.nix
   ];
   networking.hostName = "fred";
   boot.binfmt.emulatedSystems = ["aarch64-linux"];

hosts/server/unifi.nix

@@ -0,0 +1,30 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+
+  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
+    "unifi-controller"
+  ];
+  services = {
+    unifi = {
+      enable = true;
+      unifiPackage = pkgs.unifi8;
+      openFirewall = true;
+    };
+    nginx = {
+      enable = true;
+      recommendedProxySettings = true;
+
+      virtualHosts."unifi.local" = {
+        # forceSSL = true;
+        # useACMEHost = "unifi.local";
+        locations."/" = {
+          proxyPass = "https://127.0.0.1:8443";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}