{ config, ... }: let baseDomain = "elnu.com"; domain = "headscale.${baseDomain}"; in { services.headscale = { enable = true; address = "0.0.0.0"; port = 8080; settings = { server_url = "https://${domain}"; dns_config.base_domain = baseDomain; }; }; environment.systemPackages = [ config.services.headscale.package ]; services.nginx.virtualHosts.${domain} = { forceSSL = true; enableACME = true; locations."/" = { proxyPass = "http://localhost:${ toString config.services.headscale.port }"; proxyWebsockets = true; }; }; }