diff options
author | Martin Fischer <martin@push-f.com> | 2024-12-27 13:16:07 +0100 |
---|---|---|
committer | Martin Fischer <martin@push-f.com> | 2024-12-27 18:44:56 +0100 |
commit | 28424ccb86f9fe02c9e9f95958cf10d3a9fe3777 (patch) | |
tree | 676f8a3dae5266c24569c7c633d1247a7125c095 /nixos/hosts/tente/web-personal.nix | |
parent | 1b65ba7a838e422c9bf16ddcaf796a996fa51b6b (diff) |
refactor: split up tente/default.nix
Diffstat (limited to 'nixos/hosts/tente/web-personal.nix')
-rw-r--r-- | nixos/hosts/tente/web-personal.nix | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/nixos/hosts/tente/web-personal.nix b/nixos/hosts/tente/web-personal.nix new file mode 100644 index 0000000..7c17063 --- /dev/null +++ b/nixos/hosts/tente/web-personal.nix @@ -0,0 +1,40 @@ +{ config, lib, pkgs, ... }: + +let + cfg = config.web-personal; +in +{ + options.web-personal = { + domain = lib.mkOption { + type = lib.types.str; + }; + matrixApiDomain = lib.mkOption { + type = lib.types.str; + }; + }; + + config = { + services = { + nginx.virtualHosts.${cfg.domain} = + let + mkWellKnown = data: '' + default_type application/json; + add_header Access-Control-Allow-Origin *; + return 200 '${builtins.toJSON data}'; + ''; + in + { + enableACME = true; + forceSSL = true; + root = "/srv/www/${cfg.domain}"; + + locations."= /.well-known/matrix/server".extraConfig = mkWellKnown { + "m.server" = "${cfg.matrixApiDomain}:443"; + }; + locations."= /.well-known/matrix/client".extraConfig = mkWellKnown { + "m.homeserver" = { base_url = "https://${cfg.matrixApiDomain}"; }; + }; + }; + }; + }; +} |