proxy nginx behind k3s

homelab-services/minio-service/flake.nix

@@ -187,13 +187,14 @@
 
             services.nginx = lib.mkIf opts.default-nginx.enable {
               enable = true;
+
+              # allow proxy through k3s
+              defaultHTTPListenPort = 8080;
+              defaultSSLListenPort = 8443;
+
               virtualHosts.${opts.default-nginx.hostname} = {
                 forceSSL = true;
 
-                # allow proxy through k3s
-                defaultHTTPListenPort = 8080;
-                defaultSSLListenPort = 8443;
-
                 # Parse TLD from hostname to use wildcard cert (just takes last two elements separated by a period)
                 useACMEHost =
                   let