Misc updates to stokes

clusters/stokes/default.nix

@@ -46,6 +46,7 @@ let
         webUI.allow = [
             "10.1.2.0/24"
             "172.19.254.0/24"
+            "172.19.255.0/24"
         ];
         infiniband-exporter = {
           enable = true;
@@ -140,6 +141,27 @@ let
         smtp_from = "noreply@stokes.regnekraft.io";
     };
 
+    services.nginx = {
+      virtualHosts = {
+        "ds.matnoc.regnekraft.io" = {
+          forceSSL = true;
+          enableACME = true;
+          serverAliases = [];
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:9088";
+            proxyWebsockets = false;
+            extraConfig = ''
+              allow 10.1.2.0/24;
+              allow 172.19.254.0/24;
+              allow 172.19.255.0/24;
+              deny all;
+            '';
+          };
+        };
+      };
+    };
+
+
     imports = [ ./cluster.nix ./hw/frontend.nix ];
   };