bebop: enable etesync service

flake.nix

@@ -87,6 +87,7 @@
             ./modules/outline.nix
             ./modules/vaultwarden.nix
             ./modules/hledger.nix
+            ./modules/etesync.nix
 
             # Host-specific config
             nixos-hardware.nixosModules.raspberry-pi-4

modules/etesync.nix

@@ -0,0 +1,39 @@
+{ ... }:
+{
+  services = {
+    etesync-dav = {
+      enable = true;
+      port = 37358;
+      openFirewall = false;
+      host = "0.0.0.0";
+      apiUrl = "https://etesync.bhankas.org/";
+    };
+
+    nginx = {
+      enable = true;
+      virtualHosts = {
+        "etesync.bhankas.org" = {
+          addSSL = true;
+          enableACME = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:37358";
+            proxyWebsockets = false;
+            extraConfig =
+              "proxy_set_header Host $host;"
+            ;
+          };
+        };
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = {
+      "etesync.bhankas.org" = {
+        email = "admin@bhankas.org";
+        dnsResolver = "1.1.1.1:53";
+      };
+    };
+  };
+}