minerals - a bunch of personal machine configuration.

diff options

Diffstat (limited to 'machines/bismuth/home.nix')

0 files changed, 0 insertions, 0 deletions

d='n57' href='#n57'>57 58 59 60 61 62 63 64

{ me, config, ... }:

{
  imports = [
    ../../modules/common.nix

    ./hardware.nix
    ./devices.nix

    ../../modules/www.nix

    ../../services/dendrite.nix
    ../../services/pds.nix
    ../../services/akkoma
  ];

  age.secrets.cloudflare-dns = {
    file = ../../secrets/cloudflare-dns.age;
  };

  security.acme.certs."pds.rnrd.eu" = {
    group = "nginx";
    domain = "*.pds.rnrd.eu";
    extraDomainNames = [ "pds.rnrd.eu" ];
    dnsProvider = "cloudflare";
    credentialFiles = {
      CLOUDFLARE_DNS_API_TOKEN_FILE = config.age.secrets.cloudflare-dns.path;
    };
  };

  services.nginx.virtualHosts = {
    "soc.rnrd.eu" = {
      forceSSL = true;
      enableACME = true;

      locations."/" = {
        proxyWebsockets = true;
        proxyPass = "http://127.0.0.1:1111";
      };
    };

    "matrix.rnrd.eu" = {
      forceSSL = true;
      enableACME = true;

      locations."/_matrix" = {
        proxyPass = "http://127.0.0.1:8008";
      };
    };

    "pds.rnrd.eu" = {
      serverAliases = [ "*.pds.rnrd.eu" ];
      forceSSL = true;
      useACMEHost = "pds.rnrd.eu";

      locations."/" = {
        proxyWebsockets = true;
        proxyPass = "http://127.0.0.1:16419";
      };
    };
  };

  system.stateVersion = "23.05";
}


context:
space:
mode: