nixos-config/machines/chungus/services-s3.nix

{ config, factsGenerator, ... }:
{

  clan.core.facts.services.s3 = factsGenerator.password { name = "root"; service = "s3"; };

  services.minio = {
    enable = true;
    region = "home";
    rootCredentialsFile = config.clan.core.facts.services.s3.secret."s3.root".path;
  };

  services.nginx = {
    enable = true;
    virtualHosts."s3.${config.networking.hostName}.private" = {
      locations."/" = {
        recommendedProxySettings = true;
        proxyWebsockets = true;
        proxyPass = "http://localhost:9000";
      };
    };
    virtualHosts."minio.${config.networking.hostName}.private" = {
      locations."/" = {
        recommendedProxySettings = true;
        proxyWebsockets = true;
        proxyPass = "http://localhost:9001";
      };
    };
  };
}