50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
...
|
|
}:
|
|
{
|
|
config = lib.mkMerge [
|
|
(lib.mkIf config.osbmModules.services.nginx.enable {
|
|
services.nginx = {
|
|
enable = true;
|
|
|
|
# Add virtual host for mail.osbm.dev to handle ACME challenges
|
|
virtualHosts."mail.osbm.dev" = lib.mkIf config.osbmModules.services.mailserver.enable {
|
|
locations."/.well-known/acme-challenge" = {
|
|
root = "/var/lib/acme/acme-challenge";
|
|
};
|
|
};
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults.email = "osbm@osbm.dev";
|
|
};
|
|
})
|
|
|
|
(lib.mkIf
|
|
(
|
|
config.osbmModules.services.nginx.enable
|
|
&& config.osbmModules.hardware.disko.zfs.root.impermanenceRoot
|
|
)
|
|
{
|
|
environment.persistence."/persist" = {
|
|
directories = [
|
|
{
|
|
directory = "/var/lib/acme";
|
|
user = "acme";
|
|
group = "nginx";
|
|
mode = "0750";
|
|
}
|
|
];
|
|
};
|
|
}
|
|
)
|
|
];
|
|
}
|