infrastructure/hosts/carbon/services/privacy/rimgo.nix

{ pkgs, config, ... }: {


  services.rimgo = {
    enable = true;
    settings = {
      ADDRESS = "0.0.0.0";
      PORT = 4312;
      FIBER_PREFORK = "false";

      # Link to a privacy policy (optional)
      PRIVACY_POLICY = "https://4o1x5.dev/privacy-policy";
      # Explain how this data is used/why it is collected (optional)
      PRIVACY_MESSAGE = "Read my privacy policy on my website";
      # Country where instance is located. Leave blank if running on Tor without clearnet.
      PRIVACY_COUNTRY = "HU";
      # Hosting provider or ISP name. Leave blank if running on Tor without clearnet.
      PRIVACY_PROVIDER = "Telekom";
      PRIVACY_CLOUDFLARE = "false";
      PRIVACY_NOT_COLLECTED = "false";

      PRIVACY_IP = "true";
      PRIVACY_URL = "true";
      PRIVACY_DEVICE = "true";
      PRIVACY_DIAGNOSTICS = "false";
    };
  };


  services.nginx = {
    virtualHosts = {
      "rimgo.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:${toString config.services.rimgo.settings.PORT}";
        };
      };
    };
  };
}