From d3e954ea3d23f5db8815981dcf30e219b32450f9 Mon Sep 17 00:00:00 2001
From: Isabella Morgana Bastaja <isabella@sorre.xyz>
Date: Fri, 17 Apr 2026 16:16:18 +0200
Subject: sagittarius: add priv blog section

---
 hosts/sagittarius/sops.nix     |  4 ++++
 hosts/sagittarius/web/blog.nix | 14 +++++++++++++-
 2 files changed, 17 insertions(+), 1 deletion(-)

(limited to 'hosts/sagittarius')

diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix
index 04b3f20..8d6f1da 100644
--- a/hosts/sagittarius/sops.nix
+++ b/hosts/sagittarius/sops.nix
@@ -13,6 +13,10 @@
         sopsFile = ../../secrets/porkbun.env;
         format = "dotenv";
       };
+      "priv-blog-auth-file" = {
+        sopsFile = ../../secrets/priv.sorre.xyz.htpasswd.txt;
+        format = "binary";
+      };
     };
   };
 }
diff --git a/hosts/sagittarius/web/blog.nix b/hosts/sagittarius/web/blog.nix
index 671674f..d69ea20 100644
--- a/hosts/sagittarius/web/blog.nix
+++ b/hosts/sagittarius/web/blog.nix
@@ -1,4 +1,9 @@
-{ inputs, pkgs, ... }:
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
 {
   imports = [ ./acme.nix ];
   networking.firewall.allowedTCPPorts = [
@@ -14,5 +19,12 @@
       forceSSL = true;
       root = inputs.sorre-website.packages.${pkgs.system}.default;
     };
+
+    virtualHosts."priv.sorre.xyz" = {
+      enableACME = true;
+      forceSSL = true;
+      root = "/var/www/priv";
+      basicAuthFile = config.sops.secrets."priv-blog-auth-file".path;
+    };
   };
 }
-- 
cgit v1.3.1