From 471930cb64c2fba0820420d90a6374b0bf88df99 Mon Sep 17 00:00:00 2001
From: Tim Van Baak <tim.vanbaak@gmail.com>
Date: Wed, 17 Jan 2024 12:13:15 +0000
Subject: [PATCH] catacomb: add port for mirror vhost

---
 machine/catacomb/mirror.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/machine/catacomb/mirror.nix b/machine/catacomb/mirror.nix
index 6d9b161..f37b822 100644
--- a/machine/catacomb/mirror.nix
+++ b/machine/catacomb/mirror.nix
@@ -5,10 +5,18 @@
   services.nginx = {
     enable = true;
     virtualHosts."mirror.catacomb.home" = {
-      listen = [ { addr = "10.22.20.2"; } ];
+      listen = [
+        { addr = "10.22.20.2"; }
+        # Binding to 10.22.20.2:80 here confuses the empyrean revproxy, even when the revproxy
+        # is configured with the same hostname, and it serves from fileserver.nix instead.
+        # This nonstandard port supports the revproxy use case.
+        { addr = "10.22.20.2"; port = 7474; }
+      ];
       root = "/nas/doc/website/mirror";
     };
   };
 
+  networking.firewall.allowedTCPPorts = [ 7474 ];
+
   users.users.nginx.extraGroups = ["nas"];
 }