paperless-nginx-avahi.nix

{
  services.paperless = {
    enable = true;
    consumptionDirIsPublic = true;
    extraConfig = {
      PAPERLESS_CSRF_TRUSTED_ORIGINS="http://localhost,http://armando-desktop.local";
      PAPERLESS_ALLOWED_HOSTS="localhost,armando-desktop.local";
      PAPERLESS_CORS_ALLOWED_HOSTS="http://localhost,http://armando-desktop.local";
    };
  };

  networking.firewall.allowedTCPPorts = [ 80 ];

  services.nginx = {
    enable = true;
    virtualHosts."armando-desktop.local" = {
      locations."/" = {
        proxyPass = "http://localhost:28981/";
        # Per https://paperless-ngx.readthedocs.io/en/beta/setup.html#using-nginx-as-a-reverse-proxy
        extraConfig = ''
          # These configuration options are required for WebSockets to work.
          proxy_http_version 1.1;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";

          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Host $server_name;
        '';
      };
    };
  };
}