hosts/sagittarius/web/blog.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

{
  inputs,
  pkgs,
  config,
  ...
}:
{
  imports = [ ./acme.nix ];
  networking.firewall.allowedTCPPorts = [
    80
    443
  ];

  services.nginx = {
    enable = true;

    virtualHosts."sorre.xyz" = {
      enableACME = true;
      forceSSL = true;
      root = inputs.sorre-website.packages.${pkgs.system}.default;
    };

    virtualHosts."priv.sorre.xyz" = {
      enableACME = true;
      forceSSL = true;
      root = "/var/www/priv";
      basicAuthFile = config.sops.secrets."priv-blog-auth-file".path;
    };
  };
}