global restructuring and shit

modules/servers/per-host/kittykat/xray.nix

@@ -0,0 +1,26 @@
+{...}: {
+  services.xray-3x-ui = {
+    enable = true;
+    port = 2053;
+    openFirewall = false;
+  };
+  networking.firewall.allowedTCPPorts = [45544 22];
+  services.traefik.dynamicConfigOptions.http = {
+    routers.xray = {
+      rule = "Host(`v2.kittykat.poggerer.xyz`)";
+      entryPoints = ["websecure"];
+      service = "xray";
+      tls = {
+        certResolver = "letsencrypt";
+      };
+    };
+
+    services.xray = {
+      loadBalancer = {
+        servers = [
+          {url = "http://127.0.0.1:2053";}
+        ];
+      };
+    };
+  };
+}