infrastructure/hosts/carbon/services/privacy/anonymousoverflow.nix

{ pkgs, config, ... }: {

  virtualisation.oci-containers.containers = {

    anonymousoverflow = {
      image = "ghcr.io/httpjamesm/anonymousoverflow:release";
      ports = [
        "7344:8080"
      ];
      environment = {
        APP_URL = "https://anonymousoverflow.4o1x5.dev";
        JWT_SIGNING_SECRET = "${config.age.secrets.anonymousoverflow.path}";
      };
    };
  };
  services.nginx = {
    virtualHosts = {

      "anonymousoverflow.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:7344";
          extraConfig = ''
            access_log /var/log/nginx/$server_name-access.log json_analytics;
          '';
        };
      };
    };
  };
}