HermitCollective.nix/services/matrix.nix

{
  # Reqeusts SSL and adds the site to nginx
  services.nginx.virtualHosts."matrix.nederland.gay" = {
     forceSSL = true;
     enableACME = true;
     locations."/" = {
     proxyPass = "http://192.168.178.243";
     proxyWebsockets = true; # needed if you need to use WebSocket
     extraConfig =
       # required when the target is also TLS server with multiple hosts
       "proxy_ssl_server_name on;" +
       # required when the server wants to use HTTP Authentication
       "proxy_pass_header Authorization;"
       ;
     };
  };
}