<commit_before>{ config, pkgs, ... }:
{
  imports = [ ./hardware-configuration.nix ];

  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };
  networking.hostName = "dmz-rp";
  system.stateVersion = "22.05"; # Did you read the comment?


  # =====================================================================
  # TODO: Refactor this out into moudles
  # =====================================================================
  networking.firewall.allowedTCPPorts = [ 80 443 ];
  services.nginx = {
    enable = true;

    # todo: make these options
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;

    virtualHosts = {
      "jellyfin.apps.ondy.org" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "https://jellyfin.apps.dmz.509ely.com";
        };
        extraConfig = ''
          access_log /var/log/nginx/jellyfin.access;
          error_log /var/log/nginx/jellyfin.error error;
        '';
      };
      "git.apps.ondy.org" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "https://gitea.apps.dmz.509ely.com";
        };
        extraConfig = ''
          access_log /var/log/nginx/git.access;
          error_log /var/log/nginx/git.error error;
        '';
      };
    };<commit_msg>feat(nix-cache): add publicly exposed service<commit_after>{ config, pkgs, ... }:
{
  imports = [ ./hardware-configuration.nix ];

  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };
  networking.hostName = "dmz-rp";
  system.stateVersion = "22.05"; # Did you read the comment?


  # =====================================================================
  # TODO: Refactor this out into moudles
  # =====================================================================
  networking.firewall.allowedTCPPorts = [ 80 443 ];
  services.nginx = {
    enable = true;

    # todo: make these options
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;

    virtualHosts = {
      "jellyfin.apps.ondy.org" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "https://jellyfin.apps.dmz.509ely.com";
        };
        extraConfig = ''
          access_log /var/log/nginx/jellyfin.access;
          error_log /var/log/nginx/jellyfin.error error;
        '';
      };
      "git.apps.ondy.org" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "https://gitea.apps.dmz.509ely.com";
        };
        extraConfig = ''
          access_log /var/log/nginx/git.access;
          error_log /var/log/nginx/git.error error;
        '';
      };
      "nix-cache.apps.ondy.org" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {
          proxyPass = "https://nix-cache.apps.dmz.509ely.com";
        };
        extraConfig = ''
          access_log /var/log/nginx/nix-cache.access;
          error_log /var/log/nginx/nix-cache.error error;
        '';
      };
    };
{'fraction_non_alphanumeric': 0.21007371007371006, 'fraction_numerical': 0.010135135135135136, 'mean_word_length': 2.215202369200395, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 5, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '954040', 'n_tokens_mistral': 1033, 'n_tokens_neox': 992, 'n_words': 162}