Adding kanidm

hosts/zora/reverse-proxy.nix

@@ -0,0 +1,24 @@
+{ config, ... }:
+
+{
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "security@lyes.eu";
+  };
+
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts = {
+      "auth.lyes.eu" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "https://${config.services.kanidm.serverSettings.bindaddress}";
+        };
+      };
+    };
+  };
+}