Paywall proxy

Closes fsmi/ToDos#99

hosts/fsmi-buzzer/configuration.nix

@@ -15,6 +15,9 @@ let
       lockPref("browser.shell.checkDefaultBrowser", false);
     '';
   };
+  # Paywall proxy authorization config
+  password = builtins.readFile "/var/keys/paywall_auth.txt";
+  headerconf = "proxy_set_header Authorization \"Basic " + password + "\";";
 in
 {
   imports = [
@@ -57,9 +60,22 @@ in
 
   users.users.kiosk = {
     isNormalUser = true;
-    openssh.authorizedKeys.keyFiles = [
-      (pkgs.writeText "kiosk-ssh-key" ssh-keys)
-    ];
+  };
+
+  # Proxy for autheticated paywall
+  services.nginx.enable = true;
+  services.nginx.virtualHosts."paywall.localhost" = {
+    enableACME = false;
+    forceSSL = false;
+    locations."/" = {
+      proxyPass = "https://fsmi.paywall.cs.uni-paderborn.de/";
+      #proxyPass = "http://localhost:8888/"; # Header Debug
+      recommendedProxySettings = false;
+      extraConfig = headerconf + "
+        #proxy_set_header Host \"fsmi.paywall.cs.uni-paderborn.de\";
+      ";
+      proxyWebsockets = true;
+    };
   };
 
   networking.hostName = "fsmi-buzzer";