···

       
85
       
 
       
    TXT("@", "v=spf1 -all"),

     

       
86
       
 
       
    TXT("_dmarc", "v=DMARC1; p=reject;"),

     

       
87
       
 
       
);

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
85
       
 
       
    TXT("@", "v=spf1 -all"),

     

       
86
       
 
       
    TXT("_dmarc", "v=DMARC1; p=reject;"),

     

       
87
       
 
       
);

     

       
88
       
+
       


     

       
89
       
+
       
D(

     

       
90
       
+
       
    "ptr.pet",

     

       
91
       
+
       
    REG_NONE,

     

       
92
       
+
       
    DnsProvider(DSP_CLOUDFLARE),

     

       
93
       
+
       
    DefaultTTL(1),

     

       
94
       
+
       
    A("@", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
95
       
+
       
    A("nil", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
96
       
+
       
    TXT("_atproto", "did=did:plc:dfl62fgb7wtjj3fcbb72naae"),

     

       
97
       
+
       
    TXT("_atproto.nil", "did=did:web:dawn.gaze.systems"),

     

       
98
       
+
       
    TXT("@", "v=spf1 -all"),

     

       
99
       
+
       
    TXT("_dmarc", "v=DMARC1; p=reject;"),

     

       
100
       
+
       
);

     

···

       
17
       
 
       
      }) files

     

       
18
       
 
       
    );

     

       
19
       
 
       
  };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
20
       
 
       
  mkDidWebCfg = domain: {

     

       
21
       
 
       
    "${domain}" =

     

       
22
       
 
       
      (mkWellKnownCfg {

     
···

       
26
       
 
       
      // (lib.optionalAttrs (lib.hasSuffix "gaze.systems" domain) {

     

       
27
       
 
       
        useACMEHost = "gaze.systems";

     

       
28
       
 
       
        forceSSL = true;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
29
       
 
       
      });

     

       
30
       
 
       
  };

     

       
31
       
 
       
  dawnDid = "dawn.gaze.systems";

     
···

       
36
       
 
       
    dawnDid guestbookDid "drew.gaze.systems"

     

       
37
       
 
       
  ];

     

       
38
       
 
       
  services.nginx.virtualHosts = {

     

       
39
       
-
       
    # "gaze.systems" = mkWellKnownCfg {

     

       
40
       
-
       
    #   "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
41
       
-
       
    # };

     

       
42
       
-
       
    "poor.dog" = mkWellKnownCfg {

     

       
43
       
-
       
      "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
44
       
-
       
    };

     

       
45
       
-
       
    # "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {

     

       
46
       
-
       
    #   "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
47
       
-
       
    # };

     

       
48
       
-
       
    "drew.gaze.systems" = (mkWellKnownCfg {

     

       
49
       
-
       
      "atproto-did" = pkgs.writeText "server" "did:plc:vo6ie3kd6xvpjlof4pnb2zzp";

     

       
50
       
-
       
    }) // {

     

       
51
       
-
       
        useACMEHost = "gaze.systems";

     

       
52
       
-
       
        forceSSL = true;

     

       
53
       
-
       
    };

     

       
54
       
 
       
  }

     

       
55
       
 
       
  // (mkDidWebCfg dawnDid)

     

       
56
       
 
       
  // (mkDidWebCfg guestbookDid);

     

···

       
17
       
 
       
      }) files

     

       
18
       
 
       
    );

     

       
19
       
 
       
  };

     

       
20
       
+
       
  mkHandleCfg = rootDomain: did: (mkWellKnownCfg {

     

       
21
       
+
       
    "atproto-did" = pkgs.writeText "server" did;

     

       
22
       
+
       
  })

     

       
23
       
+
       
  // {

     

       
24
       
+
       
    useACMEHost = rootDomain;

     

       
25
       
+
       
    forceSSL = true;

     

       
26
       
+
       
    quic = true;

     

       
27
       
+
       
    kTLS = true;

     

       
28
       
+
       
  };

     

       
29
       
 
       
  mkDidWebCfg = domain: {

     

       
30
       
 
       
    "${domain}" =

     

       
31
       
 
       
      (mkWellKnownCfg {

     
···

       
35
       
 
       
      // (lib.optionalAttrs (lib.hasSuffix "gaze.systems" domain) {

     

       
36
       
 
       
        useACMEHost = "gaze.systems";

     

       
37
       
 
       
        forceSSL = true;

     

       
38
       
+
       
        quic = true;

     

       
39
       
+
       
        kTLS = true;

     

       
40
       
 
       
      });

     

       
41
       
 
       
  };

     

       
42
       
 
       
  dawnDid = "dawn.gaze.systems";

     
···

       
47
       
 
       
    dawnDid guestbookDid "drew.gaze.systems"

     

       
48
       
 
       
  ];

     

       
49
       
 
       
  services.nginx.virtualHosts = {

     

       
50
       
+
       
    "poor.dog" = mkHandleCfg "poor.dog" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
51
       
+
       
    "ptr.pet" = mkHandleCfg "ptr.pet" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
52
       
+
       
    "nil.ptr.pet" = mkHandleCfg "ptr.pet" "did:web:dawn.gaze.systems";

     

       
53
       
+
       
    "drew.gaze.systems" = mkHandleCfg "gaze.systems" "did:plc:vo6ie3kd6xvpjlof4pnb2zzp";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
54
       
 
       
  }

     

       
55
       
 
       
  // (mkDidWebCfg dawnDid)

     

       
56
       
 
       
  // (mkDidWebCfg guestbookDid);

     

···

       
79
       
 
       
  services.nginx.virtualHosts."poor.dog" = {

     

       
80
       
 
       
    locations."/".return = "301 https://gaze.systems$request_uri";

     

       
81
       
 
       
  };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
82
       
 
       
}

     

···

       
79
       
 
       
  services.nginx.virtualHosts."poor.dog" = {

     

       
80
       
 
       
    locations."/".return = "301 https://gaze.systems$request_uri";

     

       
81
       
 
       
  };

     

       
82
       
+
       


     

       
83
       
+
       
  services.nginx.virtualHosts."ptr.pet" = {

     

       
84
       
+
       
    locations."/".return = "301 https://gaze.systems$request_uri";

     

       
85
       
+
       
  };

     

       
86
       
 
       
}

     

···

       
45
       
 
       
    defaults.email = (import "${inputs.self}/personal.nix").emails.primary;

     

       
46
       
 
       
    defaults.webroot = "/var/lib/acme/acme-challenge";

     

       
47
       
 
       
    certs."poor.dog" = { };

     

       
0
       
 
       

     

       
48
       
 
       
    certs."gaze.systems" = { };

     

       
49
       
 
       
  };

     

       
50
       
 
       
  services.nginx.virtualHosts."gaze.systems" = {

     
···

       
57
       
 
       
    quic = true;

     

       
58
       
 
       
    kTLS = true;

     

       
59
       
 
       
    useACMEHost = "poor.dog";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
60
       
 
       
    forceSSL = true;

     

       
61
       
 
       
  };

     

       
62
       
 
       


     

···

       
45
       
 
       
    defaults.email = (import "${inputs.self}/personal.nix").emails.primary;

     

       
46
       
 
       
    defaults.webroot = "/var/lib/acme/acme-challenge";

     

       
47
       
 
       
    certs."poor.dog" = { };

     

       
48
       
+
       
    certs."ptr.pet" = { };

     

       
49
       
 
       
    certs."gaze.systems" = { };

     

       
50
       
 
       
  };

     

       
51
       
 
       
  services.nginx.virtualHosts."gaze.systems" = {

     
···

       
58
       
 
       
    quic = true;

     

       
59
       
 
       
    kTLS = true;

     

       
60
       
 
       
    useACMEHost = "poor.dog";

     

       
61
       
+
       
    forceSSL = true;

     

       
62
       
+
       
  };

     

       
63
       
+
       
  services.nginx.virtualHosts."ptr.pet" = {

     

       
64
       
+
       
    quic = true;

     

       
65
       
+
       
    kTLS = true;

     

       
66
       
+
       
    useACMEHost = "ptr.pet";

     

       
67
       
 
       
    forceSSL = true;

     

       
68
       
 
       
  };

     

       
69
       
 
       


     

···

       
6
       
 
       
  ],

     

       
7
       
 
       
  "id": "did:web:dawn.gaze.systems",

     

       
8
       
 
       
  "alsoKnownAs": [

     

       
0
       
 
       

     

       
9
       
 
       
    "at://dawn.gaze.systems"

     

       
10
       
 
       
  ],

     

       
11
       
 
       
  "verificationMethod": [

     

···

       
6
       
 
       
  ],

     

       
7
       
 
       
  "id": "did:web:dawn.gaze.systems",

     

       
8
       
 
       
  "alsoKnownAs": [

     

       
9
       
+
       
    "at://nil.ptr.pet",

     

       
10
       
 
       
    "at://dawn.gaze.systems"

     

       
11
       
 
       
  ],

     

       
12
       
 
       
  "verificationMethod": [