mirror of
https://github.com/gensokyo-zone/infrastructure.git
synced 2026-02-09 20:39:18 -08:00
29 lines
639 B
Nix
29 lines
639 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
services.murmur = {
|
|
enable = true;
|
|
|
|
hostName = "voice.kittywit.ch";
|
|
|
|
extraConfig = ''
|
|
sslCert=/var/lib/acme/voice.kittywit.ch/fullchain.pem
|
|
sslKey=/var/lib/acme/voice.kittywit.ch/key.pem
|
|
'';
|
|
};
|
|
|
|
services.nginx.virtualHosts."voice.kittywit.ch" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
|
|
users.groups."voice-cert".members = [ "nginx" "murmur" ];
|
|
|
|
security.acme.certs = { "voice.kittywit.ch" = { group = "voice-cert"; }; };
|
|
|
|
deploy.tf.dns.records.kittywitch_voice = {
|
|
tld = "kittywit.ch.";
|
|
domain = "voice";
|
|
cname.target = "athame.kittywit.ch.";
|
|
};
|
|
}
|