feat: add headscale

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

hosts/hosting-01/default.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 {
   imports = [
     ./disk-config.nix
@@ -14,6 +14,29 @@
   networking.hostName = "hosting-01";
   networking.nameservers = [ "8.8.8.8" ];
 
+  services = {
+    headscale = {
+      enable = true;
+      address = "0.0.0.0";
+      port = 8080;
+      settings = {
+        server_url = "https://headscale.escapeangle.com";
+        dns = {
+          base_domain = "tailnet.escapeangle.com";
+        };
+      };
+    };
+
+    nginx.virtualHosts."headscale.escapeangle.com" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${toString config.services.headscale.port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+
   security.acme.defaults.email = "landervandenbulcke@gmail.com";
   security.acme.acceptTerms = true;