summaryrefslogtreecommitdiff
path: root/hosts/fscusat/modules/www.nix
diff options
context:
space:
mode:
authorsinanmohd <sinan@sinanmohd.com>2024-03-08 10:50:28 +0530
committersinanmohd <sinan@sinanmohd.com>2024-03-08 10:52:52 +0530
commitcd942d253bda8f511fdb921ea29f69f382a9368e (patch)
tree2c7aac5f66e5b614ecdd0871df23432bae4dc6db /hosts/fscusat/modules/www.nix
parent2abeb90fbff1d33aadfec37ce80a6bc4d3551661 (diff)
repo: restructure source tree
Diffstat (limited to 'hosts/fscusat/modules/www.nix')
-rw-r--r--hosts/fscusat/modules/www.nix36
1 files changed, 0 insertions, 36 deletions
diff --git a/hosts/fscusat/modules/www.nix b/hosts/fscusat/modules/www.nix
deleted file mode 100644
index 24398da..0000000
--- a/hosts/fscusat/modules/www.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-{ config, ... }:
-
-let
- domain = "foss.fscusat.ac.in";
-in
-{
- networking.firewall.allowedTCPPorts = [ 80 443 ];
-
- sops.secrets = let
- opts = {
- owner = config.services.nginx.user;
- group = config.services.nginx.group;
- };
- in{
- "cusat.ac.in/key" = opts;
- "cusat.ac.in/crt" = opts;
- };
-
- services.nginx = {
- enable = true;
- recommendedTlsSettings = true;
- recommendedZstdSettings = true;
- recommendedOptimisation = true;
- recommendedGzipSettings = true;
- recommendedProxySettings = true;
- recommendedBrotliSettings = true;
-
- virtualHosts.${domain} = {
- forceSSL = true;
- sslCertificateKey = config.sops.secrets."cusat.ac.in/key".path;
- sslCertificate = config.sops.secrets."cusat.ac.in/crt".path;
-
- locations."/".extraConfig = "return 307 $scheme://$host/mirror/;";
- };
- };
-}