mira/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

more stuff moved to options and some more consistency

Browse source
This commit is contained in:
twoneis 2025-03-09 14:52:03 +01:00
parent 6d9dbe38cb
commit 4ab970aea9
28 changed files with 394 additions and 298 deletions
Download patch file Download diff file Expand all files Collapse all files

52
modules/nginx/default.nix
View file

@ -3,32 +3,22 @@
lib,
...
}: let
inherit (config) conf;
inherit (lib) mkIf;
inherit (lib.attrsets) genAttrs;
cfg = config.conf.nginx;
in
mkIf conf.nginx.enable {
mkIf cfg.enable {
security.acme = {
acceptTerms = true;
defaults.email = "mira@chpu.eu";
certs = {
"twoneis.site" = {
group = "nginx";
domain = "twoneis.site";
extraDomainNames = ["*.twoneis.site"];
dnsProvider = "porkbun";
email = "mira@chpu.eu";
environmentFile = "/root/porkbun-creds";
};
"chpu.eu" = {
group = "nginx";
domain = "chpu.eu";
extraDomainNames = ["*.chpu.eu"];
dnsProvider = "porkbun";
email = "mira@chpu.eu";
environmentFile = "/root/porkbun-creds";
};
};
defaults.email = cfg.email;
certs = genAttrs cfg.domains (domain: {
group = "nginx";
domain = domain;
extraDomainNames = ["*.${domain}"];
dnsProvider = "porkbun";
email = cfg.email;
environmentFile = "/root/porkbun-creds";
});
};
users.users.nginx.extraGroups = ["acme"];
@ -38,22 +28,14 @@ in
recommendedProxySettings = true;
recommendedOptimisation = true;
recommendedTlsSettings = true;
virtualHosts = {
"chpu.eu" = {
serverName = "chpu.eu";
useACMEHost = "chpu.eu";
forceSSL = true;
};
"twoneis.site" = {
serverName = "twoneis.site";
useACMEHost = "twoneis.site";
forceSSL = true;
};
};
virtualHosts = genAttrs cfg.domains (domain: {
serverName = domain;
useACMEHost = domain;
forceSSL = true;
});
};
networking.firewall.allowedTCPPorts = [
80
443
];
}