42 lines
1.3 KiB
Nix
42 lines
1.3 KiB
Nix
{ ... }:
|
|
let
|
|
homepage-old = import ../../packages/old-homepage.nix { };
|
|
in
|
|
{
|
|
systemd.services.homepage-old = {
|
|
enable = true;
|
|
description = "darkkirb.de";
|
|
script = "${homepage-old.homepage-old}/homepage";
|
|
serviceConfig = {
|
|
WorkingDirectory = homepage-old.homepage-old;
|
|
EnvironmentFile = "/run/secrets/services/old-homepage";
|
|
};
|
|
wantedBy = [ "multi-user.target" ];
|
|
};
|
|
services.nginx.virtualHosts."darkkirb.de" = {
|
|
forceSSL = true;
|
|
http2 = true;
|
|
listenAddresses = [ "0.0.0.0" "[::]" ];
|
|
sslCertificate = "/var/lib/acme/darkkirb.de/cert.pem";
|
|
sslCertificateKey = "/var/lib/acme/darkkirb.de/key.pem";
|
|
serverAliases = [ "www.darkkirb.de" ];
|
|
locations."/" = {
|
|
proxyPass = "http://localhost:3002/";
|
|
};
|
|
locations."/.well-known/matrix" = {
|
|
proxyPass = "http://localhost:3002/.well-known/matrix";
|
|
extraConfig = "add_header Access-Control-Allow-Origin '*';";
|
|
};
|
|
};
|
|
services.nginx.virtualHosts."static.darkkirb.de" = {
|
|
addSSL = true;
|
|
http2 = true;
|
|
listenAddresses = [ "0.0.0.0" "[::]" ];
|
|
sslCertificate = "/var/lib/acme/darkkirb.de/cert.pem";
|
|
sslCertificateKey = "/var/lib/acme/darkkirb.de/key.pem";
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:9000/static.darkkirb.de/";
|
|
};
|
|
};
|
|
sops.secrets."services/old-homepage" = { };
|
|
}
|