add mongodb

hosts/nixos/vps/proxy.nix

@@ -70,5 +70,21 @@
       };
 
     };
+
+    tcp = {
+      routers.mongodb = {
+        rule = "HostSNI(`mongodb.yanlincs.com`)";
+        service = "mongodb";
+        entrypoints = [ "mongodb" ];
+        tls = {
+          certResolver = "cloudflare";
+          domains = [{ main = "*.yanlincs.com"; }];
+        };
+      };
+      services.mongodb = {
+        loadBalancer.servers = [{ address = "nfss.yanlincs.com:27017"; }];
+      };
+    };
+
   };
 }

hosts/nixos/vps/system.nix

@@ -40,7 +40,7 @@
     useDHCP = true; # VPS typically use DHCP
     firewall = {
       enable = true;
-      allowedTCPPorts = [ 22 80 443 22000 ];
+      allowedTCPPorts = [ 22 80 443 22000 27017 ];
       allowedUDPPorts = [ 22000 ];
       trustedInterfaces = [ "tailscale0" ];
     };