✨ [pi4] Add reverse proxy for martials.no staging environment

hosts/pi4/actual.nix

@@ -1,6 +1,7 @@
 { config, common, ... }:
 let
   domain = "beta.budget.${common.domain}";
+  port = 8084;
 in
 {
   networking.nat = {
@@ -19,11 +20,12 @@ in
     config =
       { ... }:
       {
+        networking.firewall.allowedTCPPorts = [ port ];
         services = {
           actual = {
             enable = true;
             settings = {
-              port = 8084;
+              inherit port;
               loginMethod = "password";
             };
           };
@@ -35,7 +37,7 @@ in
     forceSSL = true;
     enableACME = true;
     locations."/" = {
-      proxyPass = "http://${config.containers.actual.localAddress}:8084";
+      proxyPass = "http://${config.containers.actual.localAddress}:${toString port}";
       proxyWebsockets = true;
     };
   };

hosts/pi4/nginx.nix

@@ -33,6 +33,7 @@ in
       # Beta is currently stable
       "www.${domain}" = redirect "";
       "beta.${domain}" = redirect "";
+      "dev.${domain}" = homelabProxy 4322;
       "git.${domain}" = redirect "code";
       "kitchenowl.${domain}" = redirect "grocery";
       # Gitea