From 37eaa99f7dea5303c899c9f98ba991373463eadc Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Tue, 24 Jan 2023 13:06:51 +0100
Subject: [PATCH] finishing jellyfin

---
 nixos/machines/robi/jellyfin.nix | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/nixos/machines/robi/jellyfin.nix b/nixos/machines/robi/jellyfin.nix
index a2ae7b3..210ae6e 100644
--- a/nixos/machines/robi/jellyfin.nix
+++ b/nixos/machines/robi/jellyfin.nix
@@ -8,4 +8,23 @@
     driSupport = true;
     driSupport32Bit = true;
   };
+  services.nginx = {
+    enable = true;
+    virtualHosts. "flix.ingolf-wagner.de" = {
+      forceSSL = true;
+      enableACME = true;
+      extraConfig = ''
+        # Security / XSS Mitigation Headers
+        # NOTE: X-Frame-Options may cause issues with the webOS app
+        add_header X-Frame-Options "SAMEORIGIN";
+        add_header X-XSS-Protection "1; mode=block";
+        add_header X-Content-Type-Options "nosniff";
+      '';
+      locations."/" = {
+        recommendedProxySettings = true;
+        proxyWebsockets = true;
+        proxyPass = "http://localhost:8096";
+      };
+    };
+  };
 }