nginx: add listenAddresses

This allows the user to manually specify the addresses nginx shoud 
listen on, while still having the convinience to use the *SSL options 
and have the ports automatically applied

nixos/modules/services/web-servers/nginx/default.nix

@@ -230,13 +230,13 @@ let
 
         defaultListen =
           if vhost.listen != [] then vhost.listen
-          else optionals (hasSSL || vhost.rejectSSL) (
+          else
-            singleton { addr = "0.0.0.0"; port = 443; ssl = true; }
+            let addrs = if vhost.listenAddresses != [] then vhost.listenAddreses else (
-            ++ optional enableIPv6 { addr = "[::]"; port = 443; ssl = true; }
+              [ "0.0.0.0" ] ++ optional enableIPv6 "[::0]"
-          ) ++ optionals (!onlySSL) (
+            );
-            singleton { addr = "0.0.0.0"; port = 80; ssl = false; }
+            in
-            ++ optional enableIPv6 { addr = "[::]"; port = 80; ssl = false; }
+          optionals (hasSSL || vhost.rejectSSL) (map (addr: { inherit addr; port = 443; ssl = true; }) addrs)
-          );
+          ++ optionals (!onlySSL) (map (addr: { inherit addr; port = 80; ssl = false; }) addrs);
 
         hostListen =
           if vhost.forceSSL

nixos/modules/services/web-servers/nginx/vhost-options.nix

@@ -43,9 +43,26 @@ with lib;
         IPv6 addresses must be enclosed in square brackets.
         Note: this option overrides <literal>addSSL</literal>
         and <literal>onlySSL</literal>.
+
+        If you only want to set the addresses manually and not
+        the ports, take a look at <literal>listenAddresses</literal>
       '';
     };
 
+    listenAddresses = mkOption {
+      type = with types; listOf str;
+
+      description = ''
+        Listen addresses for this virtual host.
+        Compared to <literal>listen</literal> this only sets the addreses
+        and the ports are choosen automatically.
+
+        Note: This option overrides <literal>enableIPv6</literal>
+      '';
+      default = [];
+      example = [ "127.0.0.1" "::1" ];
+    };
+
     enableACME = mkOption {
       type = types.bool;
       default = false;