nixos-config/modules/system/services/server/social/matrix/coturn/nginx/default.nix

{ config, lib, ... }:
{
  config = lib.mkIf config.services.coturn.enable {
    services.nginx.virtualHosts."turn.${config.domains.p1}" = {
      enableACME = true;
      forceSSL = true;
      listen = [{
        addr = "0.0.0.0";
        port = 80;
        ssl = false; 
      }];
      locations."/".proxyPass = "http://127.0.0.1:1380";
    };

    security.acme.certs = {       
      "turn.${config.domains.p1}" = {
        group = "turnserver";
        postRun = "systemctl restart coturn.service";
      };
    };
  };
}