hostnix/elmo/web.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

{ ... }:

# TODO serve /srv behind authentication

{
  # Assumes proper permissions set by syncthing.nix
  systemd.tmpfiles.rules = [
    "L /home/joe/Public - - - - /srv/syncthing/Public/"
  ];

  services.nginx = {
    enable = true;
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;
    virtualHosts."elmo.mou.fo" = {
      default = true;
      enableACME = true;
      forceSSL = true;
      root = "/var/www";
      locations = {
        "/user/".extraConfig = ''
          charset utf-8;
          autoindex on;
          autoindex_exact_size off;
          autoindex_localtime on;
        '';
      };
    };
  };

  security.acme.certs."elmo.mou.fo".extraDomainNames = [ "*.elmo.mou.fo" ];
}