increase snowflake capacity, add tor subdomain

config/http/default.nix

@@ -1,7 +1,10 @@
 {config, ...}: let
   customDomain = config.customOps.domain.fqdn;
 in {
-  imports = [./captiveportal.nix];
+  imports = [
+    ./captiveportal.nix
+    ./tor-snowflake.nix
+  ];
 
   networking.firewall.allowedTCPPorts = [80 443];
 

config/http/tor-snowflake.nix

@@ -0,0 +1,9 @@
+{config, ...}: let
+  torDomain = "tor.${config.customOps.domain.fqdn}";
+in {
+  services.nginx.virtualHosts.${torDomain} = {
+    root = "/var/www/${torDomain}";
+    forceSSL = true;
+    enableACME = true;
+  };
+}

config/network.nix

@@ -64,7 +64,7 @@ in {
 
   services.snowflake-proxy = {
     enable = true;
-    capacity = 10;
+    capacity = 20;
     extraFlags = ["-metrics"];
   };
 }