{ self, hostPath, tree, inputs, config, pkgs, ... }: let containerAddresses = import "${hostPath}/data/containerAddresses.nix"; hostIP = containerAddresses.host; containerIP = containerAddresses.containers.rss; in { containers.rss = { autoStart = true; privateNetwork = true; hostAddress = hostIP; localAddress = containerIP; specialArgs = { inherit inputs; inherit tree; inherit self; inherit hostPath; }; config = {...}: { nixpkgs.pkgs = pkgs; imports = with tree; [ presets.nixos.containerBase ./secrets.nix ] ++ (with hosts.hetzner-arm.containers.rss.profiles; [ freshrss restic ]); networking.firewall.allowedTCPPorts = [80]; home-manager.users.root.home.stateVersion = "23.05"; system.stateVersion = "23.05"; }; }; services.nginx = { enable = true; virtualHosts."freshrss.owo.monster" = { enableACME = true; forceSSL = true; locations."/".proxyPass = "http://${containerIP}:80"; }; }; }