1{pkgs, inputs, ...}:
2let
3 rootDomain = "vpn.gaze.systems";
4 domain = "trill.ptr.pet";
5 pkg = pkgs.callPackage "${inputs.trill}/nix" rec {
6 memos-modules = pkgs.callPackage "${inputs.trill}/nix/modules.nix" {};
7 VITE_CLIENT_URI = "https://${domain}";
8 VITE_OAUTH_CLIENT_ID = "${VITE_CLIENT_URI}/oauth-client-metadata.json";
9 VITE_OAUTH_REDIRECT_URL = "${VITE_CLIENT_URI}/";
10 };
11in
12{
13 security.acme.certs.${rootDomain}.extraDomainNames = [domain];
14 services.nginx.virtualHosts.${domain} = {
15 useACMEHost = rootDomain;
16 forceSSL = true;
17 quic = true;
18 kTLS = true;
19 locations."/" = {
20 root = pkg;
21 tryFiles = "$uri $uri/ /index.html";
22 };
23 };
24}