gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

config/services/access: Trusted addition

Browse source
This commit is contained in:
kat witch 2021-11-14 21:00:54 +00:00
parent cbcf987180
commit 086c513321
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72
1 changed files with 25 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

9
config/services/access.nix
View file

@ -1,4 +1,4 @@
{ config, lib, meta, ... }: {
{ config, lib, meta, ... }: with lib; {
deploy.tf.dns.records.services_media_forward = {
inherit (config.network.dns) zone;
domain = "media";
@ -11,7 +11,8 @@
cname = { inherit (config.network.addresses.public) target; };
};
services.nginx.virtualHosts = {
services.nginx.virtualHosts = mkMerge [
{
"cast.${config.network.dns.domain}" = {
forceSSL = true;
enableACME = true;
@ -33,5 +34,7 @@
};
};
};
};
}
(mkIf config.deploy.profile.trusted (import config.kw.secrets.repo.access.source { inherit config meta; }))
];
}