feat: add livekit

config/endpoints.nix

@@ -1,4 +1,5 @@
 let
   piTunnelEndpoints = import ../config/endpoints/pi_tunnel.nix;
+  livekitLocalEndpoints = import ../config/endpoints/livekit_local.nix;
 in
-piTunnelEndpoints ++ []
+piTunnelEndpoints ++ livekitLocalEndpoints

config/endpoints/livekit_local.nix

@@ -0,0 +1,29 @@
+let
+  serviceConfig = import ../services.nix;
+  cfg = serviceConfig.livekit;
+in
+[
+  {
+    type = "proxy";
+    listenPort = 443;
+    domain = cfg.domain;
+    endpoint = "/livekit/jwt/";
+    force_ssl = true;
+    content = {
+      host = "127.0.0.1";
+      port = cfg.jwt_port;
+    };
+  }
+  {
+    type = "proxy";
+    listenPort = 443;
+    domain = cfg.domain;
+    endpoint = "/livekit/sfu/";
+    force_ssl = true;
+    content = {
+      host = "127.0.0.1";
+      port = cfg.port;
+      websocket = true;
+    };
+  }
+]

config/endpoints/pi_tunnel.nix

@@ -1,13 +1,38 @@
 let
-  ports = [80 443 8448];
-  entry = port:
+  forwards = [{
+    port = 80;
+    domain = "vikunja.nudelerde.de";
+  }
+  {
+    port = 443;
+    domain = "vikunja.nudelerde.de";
+    tls = true;
+  }
+  {
+    port = 80;
+    domain = "nudelerde.de";
+  }
+  {
+    port = 443;
+    domain = "nudelerde.de";
+    tls = true;
+  }
+  {
+    port = 8448;
+    domain = "nudelerde.de";
+    tls = true;
+  }
+  ];
+  entry = forward:
     {
       type = "forwarding";
-      listenPort = port;
+      listenPort = forward.port;
+      domain = forward.domain;
       content = {
-        port = 10000 + port;
+        port = 10000 + forward.port;
+        tls = forward.tls or false;
       };
     };
 
 in
-  map entry ports
+  map entry forwards

config/services.nix

@@ -1,6 +1,19 @@
 {
   nginx = {
     enable = true;
-    acmeEmail = null;
+    acmeEmail = "katharina.heidenreich02@gmail.com";
+  };
+
+  nginxProxyOffset = 20000;
+
+  livekit = {
+    enable = true;
+    domain = "livekit.nudelerde.de";
+    keyFile = "/var/lib/livekit/livekit.keys";
+    port = 7880;
+    jwt_port = 8081;
+    trusted_homeservers = [ "nudelerde.de" ];
+    rtc_port_range_start = 50000;
+    rtc_port_range_end = 51000;
   };
 }