Nginx isn't the problem I will leave it as is

services/iceshrimp.nix

@@ -5,7 +5,7 @@
     iceshrimp = {
       enable = true; # Actually enable the module
       createDb = true;
-      configureNginx.enable = true; 
+      configureNginx.enable = false; 
       stateDir = "/var/lib/iceshrimp";
       mediaDir = "/var/lib/iceshrimp/files";
       settings = {
@@ -14,5 +14,20 @@
         maxCaptionLength = 5000; # We did it HermitCollective!! We solved accesibility!
       };
     };
+
+    nginx.virtualHosts."mastodon.hermitcollective.net" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:3000";
+        proxyWebsockets = true; # needed if you need to use WebSocket
+        extraConfig =
+          # required when the target is also TLS server with multiple hosts
+          "proxy_ssl_server_name on;" +
+          # required when the server wants to use HTTP Authentication
+          "proxy_pass_header Authorization;"
+          ;
+      };
+    };
   };
 }