nixos-selfhost/tunnel.nix

{...}:
{
  services.nginx = {
    enable = true;
    clientMaxBodySize = "10g";
    defaultHTTPListenPort = 1234;
  };
  services.cloudflared = {
    enable = true;
    tunnels = {
      "tulpan" = {
        credentialsFile = "/etc/nixos/.secrets/tulpan-tunnel.json";
        default = "http_status:404";
        ingress = {
          "*.sondell.org" = "http://localhost:1234";
          "sondell.org" = "http://localhost:1234";
        };
      };
    };
  }; 
}