sslh.nix

{ lib, ... }:
with lib;

{
  options.services.nginx.virtualHosts = mkOption {
    type = types.attrsOf (types.submodule {
      listen = mkOption {
        type = with types; listOf (submodule {});
        default = [
          { addr = "127.0.0.1"; port = 443; ssl = true;}
          { addr = "127.0.0.1"; port = 80; }
        ];
      };
    });
  };

  config = {
    services.sslh = {
      enable = true;
      transparent = true;
      defaultAppendConfig = ''
        protocols:
        (
          { name: "ssh"; service: "ssh"; host: "localhost"; port: "22"; probe: "builtin"; },
          { name: "xmpp"; host: "localhost"; port: "5222"; probe: "builtin"; },
          { name: "ssl"; host: "localhost"; port: "443"; probe: "builtin"; },
          { name: "tinc"; host: "localhost"; port: "655"; probe: "builtin"; }
        );
    '';
    };
  };
}