enable mollysocket on queen

nixos/server/package-configs/default.nix

@@ -13,5 +13,6 @@
     #./cinny
     #./firefox-sync
     ./writefreely
+    ./mollysocket
   ];
 }

nixos/server/package-configs/mollysocket/default.nix

@@ -0,0 +1,26 @@
+{config, ...}: {
+  sops.secrets."mollysocket-vapid-key".mode = "0440";
+  sops.secrets."mollysocket-vapid-key".owner = config.users.users.root.name;
+
+  services.mollysocket = {
+    enable = true;
+    settings = {
+      port = 4381;
+      vapid_key_file = config.sops.secrets."mollysocket-vapid-key".path;
+      allowed_endpoints = ["molly.gladtherescake.eu" "nextcloud.gladtherescake.eu"];
+      allowed_uuids = ["*"];
+      webserver = true;
+    };
+  };
+  services.nginx = {
+    virtualHosts = {
+      "molly.gladtherescake.eu" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://localhost:4381";
+        };
+      };
+    };
+  };
+}