nix machine / user configurations
at terra 689 B view raw
1{pkgs, inputs, ...}: 2let 3 rootDomain = "vpn.gaze.systems"; 4 domain = "trill.ptr.pet"; 5 pkg = pkgs.callPackage "${inputs.trill}/nix" rec { 6 memos-modules = pkgs.callPackage "${inputs.trill}/nix/modules.nix" {}; 7 VITE_CLIENT_URI = "https://${domain}"; 8 VITE_OAUTH_CLIENT_ID = "${VITE_CLIENT_URI}/oauth-client-metadata.json"; 9 VITE_OAUTH_REDIRECT_URL = "${VITE_CLIENT_URI}/"; 10 }; 11in 12{ 13 security.acme.certs.${rootDomain}.extraDomainNames = [domain]; 14 services.nginx.virtualHosts.${domain} = { 15 useACMEHost = rootDomain; 16 forceSSL = true; 17 quic = true; 18 kTLS = true; 19 locations."/" = { 20 root = pkg; 21 tryFiles = "$uri $uri/ /index.html"; 22 }; 23 }; 24}