Nextcloud: Serve on 4431 with proxy protocol

hosts/nextcloud.nix

@@ -49,13 +49,41 @@ in
         after = ["postgresql.service"];
     };
 
-    networking.firewall.allowedTCPPorts = [ 80 443 ];
+    networking.firewall.allowedTCPPorts = [ 80 443 4431 ];
 
     services.nginx = {
         virtualHosts.${hostName} = {
             forceSSL = true;
             enableACME = true;
         };
+        defaultListen = [
+            {
+                addr = "[::]";
+                port = 443;
+                ssl = true;
+            }
+            {
+                addr = "0.0.0.0";
+                port = 443;
+                ssl = true;
+            }
+            {
+                addr = "[::]";
+                port = 80;
+                ssl = false;
+            }
+            {
+                addr = "0.0.0.0";
+                port = 80;
+                ssl = false;
+            }
+            {
+                addr = "[::]";
+                port = 4431;
+                ssl = true;
+                proxyProtocol = true;
+            }
+        ];
     };
 
     users.extraGroups.music = {