ingress-proxy: add sapphic-engineer

nixos/hosts/ingress-proxy/default.nix

@@ -42,6 +42,13 @@ in {
       inactive = "720m";
     };
 
+    proxyCachePath."se" = {
+      enable = true;
+      keysZoneSize = "16m";
+      keysZoneName = "se";
+      inactive = "720m";
+    };
+
     virtualHosts = let
       defaultConfig = {
         listen = [
@@ -106,6 +113,36 @@ in {
           '';
         };
       } // defaultConfig // { forceSSL = false; };
+
+      "sapphic.engineer" = {
+        locations."/" = {
+          recommendedProxySettings = true;
+          proxyPass = "https://se";
+          proxyWebsockets = true;
+          extraConfig = ''
+            proxy_request_buffering off;
+          '';
+        };
+
+        locations."/proxy" = {
+          recommendedProxySettings = true;
+          proxyPass = "https://se";
+
+          extraConfig = ''
+            proxy_request_buffering off;
+            proxy_cache se;
+            slice 1m;
+            proxy_cache_key $host$uri$is_args$args$slice_range;
+            proxy_set_header Range $slice_range;
+            proxy_buffering on;
+            proxy_cache_lock on;
+            proxy_ignore_client_abort on;
+            proxy_cache_valid 200 1y;
+            proxy_cache_valid 206 301 304 1h;
+            proxy_cache_use_stale error timeout invalid_header updating;
+          '';
+        };
+      } // defaultConfig // { forceSSL = false; };
     };
   };