Add puzzles module and nginx vhosts for puzzles.joshuabell.xyz

hosts/h001/flake.nix

@@ -123,19 +123,6 @@
               )
 
               inputs.puzzles.nixosModules.default
-              (
-                { pkgs, ... }:
-                {
-                  services.puzzles-server = {
-                    enable = true;
-                    package = inputs.puzzles.packages.${pkgs.system}.default;
-                    settings = {
-                      http = "0.0.0.0:8093";
-                    };
-                  };
-                }
-              )
-
               nixarr.nixosModules.default
               ./hardware-configuration.nix
               ./mods

hosts/h001/mods/default.nix

@@ -18,5 +18,6 @@
     ./openbao.nix
     ./homepage-dashboard.nix
     # ./vault.nix
+    ./puzzles.nix
   ];
 }

hosts/h001/mods/puzzles.nix

@@ -0,0 +1,24 @@
+{ inputs, pkgs, ... }:
+{
+  services.nginx.virtualHosts = {
+    "puzzles.joshuabell.xyz" = {
+      addSSL = true;
+      sslCertificate = "/var/lib/acme/joshuabell.xyz/fullchain.pem";
+      sslCertificateKey = "/var/lib/acme/joshuabell.xyz/key.pem";
+      locations = {
+        "/" = {
+          proxyWebsockets = true;
+          recommendedProxySettings = true;
+          proxyPass = "http://127.0.0.1:8093";
+        };
+      };
+    };
+  };
+  services.puzzles-server = {
+    enable = true;
+    package = inputs.puzzles.packages.${pkgs.system}.default;
+    settings = {
+      http = "127.0.0.1:8093";
+    };
+  };
+}

hosts/oracle/o001/nginx.nix

@@ -237,6 +237,13 @@ in
             proxyPass = "http://100.64.0.13";
           };
         };
+        "puzzles.joshuabell.xyz" = {
+          enableACME = true;
+          forceSSL = true;
+          locations."/" = {
+            proxyPass = "http://100.64.0.13";
+          };
+        };
         "llm.joshuabell.xyz" = {
           enableACME = true;
           forceSSL = true;