feat: Add comfy-ui with basic auth

hosts/crossbox/comfyui.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, lib, ... }:
+
+{
+  services.comfyui = {
+    enable = true;
+    listenAddress = "127.0.0.1";
+    port = 8188;
+  };
+}

hosts/crossbox/default.nix

@@ -15,6 +15,7 @@ in
     ./forgejo.nix
     ./radicale.nix
     ./ollama.nix
+    ./comfyui.nix
     #./rustdesk.nix
     # ./llama-server.nix  # disabled: source build broken (LLVM 22 vs 19 mismatch in strix-halo overlay)
     # ./docuseal.nix

hosts/crossbox/nginx.nix

@@ -207,6 +207,23 @@ in
 	};
       };
       
+      # ComfyUI with HTTP basic authentication
+      "comfyui.binning.net" = {
+        forceSSL = true;
+
+        sslCertificate = "/srv/nginx/binning.net.pem";
+        sslCertificateKey = "/srv/nginx/binning.net.key.pem";
+
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8188";
+          proxyWebsockets = true;
+          extraConfig = ''
+            auth_basic "ComfyUI";
+            auth_basic_user_file "/srv/nginx/.htpasswd";
+          '';
+        };
+      };
+
       # RustDesk
       "rustdesk.binning.net" = {
 	forceSSL = true;