infrastructure/hosts/carbon/services/privacy/anonymousoverflow.nix

{ pkgs, config, ... }: {

  virtualisation.oci-containers.containers = {

    anonymousoverflow = {
      image = "ghcr.io/httpjamesm/anonymousoverflow:release";
      ports = [
        "7344:8080"
      ];
      environment = {
        APP_URL = "https://anonymousoverflow.4o1x5.dev";
        JWT_SIGNING_SECRET = "${config.age.secrets.anonymousoverflow.path}";
      };
    };
  };
  services.nginx = {
    virtualHosts = {

      "anonymousoverflow.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:7344";
        };
      };
    };
  };
}