infrastructure/nixos/access/zigbee2mqtt.nix

{
  config,
  lib,
  access,
  ...
}: let
  inherit (lib.modules) mkDefault;
  inherit (config.services) nginx zigbee2mqtt;
  name.shortServer = mkDefault "z2m";
in {
  config.services.nginx = {
    virtualHosts = {
      zigbee2mqtt = {
        locations."/" = {
          proxy.websocket.enable = true;
          proxyPass = mkDefault (
            if zigbee2mqtt.enable then "http://localhost:${toString zigbee2mqtt.settings.frontend.port}"
            else access.proxyUrlFor { serviceName = "zigbee2mqtt"; }
          );
        };
        inherit name;
        vouch.enable = true;
      };
      zigbee2mqtt'local = {
        inherit name;
        ssl.cert.copyFromVhost = "zigbee2mqtt";
        locations."/" = {
          proxy.websocket.enable = true;
          proxyPass = mkDefault (
            nginx.virtualHosts.zigbee2mqtt.locations."/".proxyPass
          );
        };
        local.enable = true;
      };
    };
  };
}