From 1da6dc34eb33d786a13f6fdc884fd7e3c1415f5d Mon Sep 17 00:00:00 2001
From: k <markers711@gmail.com>
Date: Wed, 28 Jan 2026 06:04:26 +0000
Subject: [PATCH] added mlflow

---
 hosts/server/service.nix | 29 ++++++++++++++++++++---------
 1 file changed, 20 insertions(+), 9 deletions(-)

diff --git a/hosts/server/service.nix b/hosts/server/service.nix
index 07997cd..23f44ca 100644
--- a/hosts/server/service.nix
+++ b/hosts/server/service.nix
@@ -6,23 +6,25 @@
   networking = {
     firewall = {
       enable = true;
-      allowedTCPPorts = [80 443 22 25565 26615 8080 53 19132 ];
-      allowedUDPPorts = [26615 8080 1900 51820 53 19132 ];
+      allowedTCPPorts = [80 443 22 25565 26615 8080 53 19132];
+      allowedUDPPorts = [26615 8080 1900 51820 53 19132];
     };
     nat.externalInterface = "wlp0s20f3";
-    nat.internalInterfaces = [ "wg0" ];
+    nat.internalInterfaces = ["wg0"];
     wireguard.interfaces = {
       wg0 = {
         ips = ["10.0.0.1/24"];
         listenPort = 51820;
         privateKeyFile = "/keys/wg-private";
-       peers = [
-          { # laptop
-	    publicKey = "Ze2y3K+blI3aBc1AKTlvv90j+McBaitB+qSLazsuSFM=";
+        peers = [
+          {
+            # laptop
+            publicKey = "Ze2y3K+blI3aBc1AKTlvv90j+McBaitB+qSLazsuSFM=";
             allowedIPs = ["10.0.0.2/32"];
           }
 
-          { # phone
+          {
+            # phone
             publicKey = "vcheBoHRxCrwzbMw0UI9ZsQfVDJizBWkeM+pF5/8+HE=";
             allowedIPs = ["10.0.0.3/32"];
           }
@@ -179,13 +181,22 @@
           };
         };
 
-        "hom.dhilton.xyz" = {
+        "mlf.dhilton.xyz" = {
           forceSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://127.0.0.1:8002";
+            proxyPass = "http://127.0.0.1:5002";
             proxyWebsockets = true;
           };
+          extraConfig = ''
+	    client_max_body_size 4G;
+            proxy_request_buffering off;
+            proxy_buffering off;
+            proxy_connect_timeout 600s;
+            proxy_send_timeout 600s;
+            proxy_read_timeout 600s;
+            send_timeout 600s;
+          '';
         };
 
         "srx.dhilton.xyz" = {