{ config, pkgs, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
      ../../configuration/common
      ../../configuration/proxmox-vm
    ];

  nixpkgs.overlays = [
    (import (fetchGit {
       url = https://bitbucket.fem.tu-ilmenau.de/scm/~clerie/workadventure-nix.git;
       ref = "0d731f0624bf2032b2a1c99667c13c273823c090";
    } + "/overlay.nix"))
  ];

  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "/dev/vda";

  networking.hostName = "world-dev";

  networking.useDHCP = false;
  networking.interfaces.ens18.ipv6.addresses = [ { address = "2001:638:904:ffcb::b"; prefixLength = 64; } ];
  networking.interfaces.ens19.ipv4.addresses = [ { address = "192.168.10.34"; prefixLength = 24; } ];
  networking.defaultGateway = { address = "192.168.10.1"; interface = "ens19"; };
  networking.defaultGateway6 = { address = "2001:638:904:ffcb::1"; interface = "ens18"; };
  networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ];

  services.nginx.enable = true;
  services.nginx.virtualHosts."world.clerie.de" = {
    enableACME = true;
    forceSSL = true;
    root = (pkgs.workadventure-xce.front.override {
      environment = {
        API_URL = "pusher.world.fem-net.de";
        JITSI_URL = "jitsi.fem.tu-ilmenau.de";
        TURN_SERVER="turn:turn.fem-net.de:3478,turns:turn.fem-net.de:5349";
        TURN_USER="workadventure";
        TURN_PASSWORD="workadventure";
      };
    }) + "/dist";

    locations."/_/" = {
      tryFiles = "/index.html =404";
    };

  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  system.stateVersion = "21.03";
}