From c42fdb7940de4a319c09a1651ab179b2a237a77c Mon Sep 17 00:00:00 2001
From: Cilly Leang <mini@cilly.moe>
Date: Sun, 15 Mar 2026 22:33:23 +1100
Subject: [PATCH] containers/beryllium: add nginx configuration

---
 containers/beryllium/configuration.nix | 2 ++
 containers/beryllium/flake.nix         | 7 +++++++
 2 files changed, 9 insertions(+)

diff --git a/containers/beryllium/configuration.nix b/containers/beryllium/configuration.nix
index d877f3b..057ae8f 100644
--- a/containers/beryllium/configuration.nix
+++ b/containers/beryllium/configuration.nix
@@ -9,6 +9,8 @@
   services.matrix-continuwuity = {
     enable = true;
     settings.global = {
+      # TODO: link this with outer container's address
+      address = [ "fd0d:1::2:2" ];
       server_name = "lava.moe";
     };
   };
diff --git a/containers/beryllium/flake.nix b/containers/beryllium/flake.nix
index af3d7aa..4e7cb5b 100644
--- a/containers/beryllium/flake.nix
+++ b/containers/beryllium/flake.nix
@@ -17,6 +17,13 @@
         internalInterfaces = [ "ve-+" ];
       };
 
+      services.nginx.virtualHosts."beryllium.lava.moe" = {
+        useACMEHost = "lava.moe";
+        forceSSL = true;
+        locations."/".proxyPass = "http://[fd0d:1::${subnet}:2]:6167";
+        listenAddresses = [ "10.0.0.1" "[fd0d::1]" ];
+      };
+
       systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];
       containers.${name} = {
         autoStart = true;