Add flowtrack period tracker

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

services/nginx.nix

@@ -203,6 +203,13 @@ in
             proxy_set_header Remote-Email $email;
           '';
         };
+        # Period tracker. The app trusts Remote-User for roles, so nginx must
+        # always overwrite it with the Authelia identity.
+        "flowtrack.nordhammer.it" = lib.recursiveUpdate (protectedProxy 8093) {
+          locations."/".extraConfig = autheliaAuthConfig + ''
+            proxy_set_header Remote-User $user;
+          '';
+        };
 
         # Pelican game panel. Can't turn off its own login (no such option
         # upstream), so Authelia is the outer gate and the Pelican account