meet: move service: VEGAS -> prophet

hosts/VEGAS/system.nix

@@ -27,7 +27,6 @@
       ./services/hyprspace
       ./services/ipfs
       ./services/jokes
-      ./services/meet
       ./services/nextcloud
       ./services/nfs
       ./services/mail

hosts/prophet/modules/nginx/default.nix

@@ -0,0 +1,39 @@
+{ lib, config, tools, ... }:
+
+let
+  inherit (tools.meta) domain adminEmail;
+in
+  with tools.nginx.vhosts;
+  with tools.nginx.mappers;
+{
+  security.acme.email = adminEmail;
+  security.acme.acceptTerms = true;
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    proxyResolveWhileRunning = false;
+    resolver = {
+      addresses = [ "127.0.0.1" ];
+      valid = "30s";
+    };
+    appendHttpConfig = ''
+      server_names_hash_bucket_size 128;
+      proxy_headers_hash_max_size 4096;
+      proxy_headers_hash_bucket_size 128;
+    '';
+  };
+  services.phpfpm.pools.www = {
+    inherit (config.services.nginx) user group;
+    settings = {
+      pm = "ondemand";
+      "pm.max_children" = 16;
+      "listen.owner" = config.services.nginx.user;
+      "listen.group" = config.services.nginx.group;
+    };
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  systemd.services.nginx.after = [ "network-online.target" ];
+}

hosts/prophet/services/meet/default.nix

@@ -1,4 +1,10 @@
-{ lib, tools, ... }:
+{ config, lib, hosts, tools, ... }:
+let
+  host = hosts.${config.networking.hostName};
+  inherit (host) interfaces;
+
+  isNAT = interfaces.primary ? addrPublic;
+in
 {
   services.jitsi-meet = {
     enable = true;
@@ -24,4 +30,11 @@
     };
   });
   boot.kernel.sysctl."net.core.rmem_max" = lib.mkForce 10485760;
+
+  environment.etc."jitsi/videobridge/sip-communicator.properties" = lib.optionalAttrs isNAT {
+    text = ''
+      org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS=${interfaces.primary.addr}
+      org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS=${interfaces.primary.addrPublic}
+    '';
+  };
 }

hosts/prophet/system.nix

@@ -6,10 +6,13 @@
       # Hardware
       ./hardware-configuration.nix
 
+      ./modules/nginx
       inputs.agenix.nixosModules.age
 
+      ./services/meet
       aspect.modules.ipfs
 
+
     ]
     ++ aspect.sets.server;