2 files changed, 17 insertions, 1 deletions
diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix
index 04b3f20..8d6f1da 100644
--- a/hosts/sagittarius/sops.nix
+++ b/hosts/sagittarius/sops.nix
@@ -13,6 +13,10 @@
         sopsFile = ../../secrets/porkbun.env;
         format = "dotenv";
       };
+      "priv-blog-auth-file" = {
+        sopsFile = ../../secrets/priv.sorre.xyz.htpasswd.txt;
+        format = "binary";
+      };
     };
   };
 }
diff --git a/hosts/sagittarius/web/blog.nix b/hosts/sagittarius/web/blog.nix
index 671674f..d69ea20 100644
--- a/hosts/sagittarius/web/blog.nix
+++ b/hosts/sagittarius/web/blog.nix
@@ -1,4 +1,9 @@
-{ inputs, pkgs, ... }:
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
 {
   imports = [ ./acme.nix ];
   networking.firewall.allowedTCPPorts = [
@@ -14,5 +19,12 @@
       forceSSL = true;
       root = inputs.sorre-website.packages.${pkgs.system}.default;
     };
+
+    virtualHosts."priv.sorre.xyz" = {
+      enableACME = true;
+      forceSSL = true;
+      root = "/var/www/priv";
+      basicAuthFile = config.sops.secrets."priv-blog-auth-file".path;
+    };
   };
 }