koi.rip
my nixos dotfiles :3 (git.koi.rip mirror)
git.koi.rip/koi/dotfiles
linux
dotfiles
neovim
nixos
catppuccin
seber: init robinwobin.dev
+43
-15
systems/seber/services/ebil-club.nix
+43
-15
systems/seber/services/ebil-club.nix
···
1
-
{ pkgs, ... }:
2
3
let
4
mkSite =
5
-
{ name, sshPubkey }:
6
let
7
-
host = "${name}.ebil.club";
8
home = "/var/ebil.club/${name}";
9
-
in
10
-
{
11
-
services.nginx.virtualHosts."${host}" = {
12
-
locations."/" = {
13
-
root = "${home}/${host}";
14
-
index = "index.html";
15
-
extraConfig = "try_files $uri $uri/ =404;";
16
-
};
17
-
extraConfig = "error_page 404 /404.html;";
18
sslCertificate = "/run/agenix/ssl-adamperkowski-cert";
19
sslCertificateKey = "/run/agenix/ssl-adamperkowski-key";
20
-
onlySSL = true;
21
};
22
23
users = {
···
29
hashedPassword = "!";
30
group = name;
31
openssh.authorizedKeys.keys = [
32
-
''command="${pkgs.rrsync}/bin/rrsync ~/${host}",restrict,no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ${sshPubkey}''
33
];
34
};
35
};
36
37
systemd.tmpfiles.rules = [
38
"d ${home} 0750 ${name} nginx -"
39
-
"d ${home}/${host} 2750 ${name} nginx -"
40
];
41
};
42
in
···
49
(mkSite {
50
name = "kolpix";
51
sshPubkey = "ssh-rsa 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";
52
})
53
];
54
···
1
+
{ lib, pkgs, ... }:
2
3
let
4
mkSite =
5
+
{
6
+
name,
7
+
sshPubkey,
8
+
canonical ? null,
9
+
}:
10
let
11
+
defaultHost = "${name}.ebil.club";
12
+
servedHost = if canonical != null then canonical else defaultHost;
13
+
14
home = "/var/ebil.club/${name}";
15
+
rootDir = "${home}/${defaultHost}";
16
+
17
+
tls = {
18
+
onlySSL = true;
19
sslCertificate = "/run/agenix/ssl-adamperkowski-cert";
20
sslCertificateKey = "/run/agenix/ssl-adamperkowski-key";
21
+
};
22
+
in
23
+
{
24
+
services.nginx.virtualHosts = {
25
+
"${servedHost}" = (
26
+
{
27
+
locations."/" = {
28
+
root = rootDir;
29
+
index = "index.html";
30
+
extraConfig = "try_files $uri $uri/ =404;";
31
+
};
32
+
extraConfig = "error_page 404 /404.html;";
33
+
}
34
+
// tls
35
+
);
36
+
}
37
+
// lib.optionalAttrs (canonical != null) {
38
+
"${defaultHost}" = (
39
+
{
40
+
locations."/".return = "307 https://${canonical}$request_uri";
41
+
}
42
+
// tls
43
+
);
44
};
45
46
users = {
···
52
hashedPassword = "!";
53
group = name;
54
openssh.authorizedKeys.keys = [
55
+
''command="${pkgs.rrsync}/bin/rrsync ~/${defaultHost}",restrict,no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ${sshPubkey}''
56
];
57
};
58
};
59
60
systemd.tmpfiles.rules = [
61
"d ${home} 0750 ${name} nginx -"
62
+
"d ${home}/${defaultHost} 2750 ${name} nginx -"
63
];
64
};
65
in
···
72
(mkSite {
73
name = "kolpix";
74
sshPubkey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDY0nHqaw1FriPBnK/hsdVGO69RGu6k/FAYNtUmYCEUS3MN0+loQWRwV2zk0KlWwIP/sMtWH/QjX5oNGpSt9Oj9jmfjgdPkQcl+4B/u93V6wK6Xl+5FufkXbtzENakPQVLX4INyZ9gViuRE4eguPFeRYSckcboxfeqlM24OUT7gvtn4r3z6c0Yx8qit/GVn1F7/ozi0lrSGknEVFUr3ewoQZWm7rpd9SjbTutqLtX6quEQzn6GG/wNxUodnIPwflGgBlfzej2SekuzLvnE1VfaaBvzOZei4VdvY7JrbKN+zlkmuKtEaZB7fkwOxegHsFRxLjSzLasI84wbWt38KTlDxPLjWPq62rJZOnI1XILCUamt9fSTraDfYeHeTCjrlKKctX0l4fvMLG4ZE1wHsELShisZuN4dPb1BqTgEL3s7n60kXG4TTUbo/frXocVf7PX1QINfnWkUPXT4fWkhYV0XALqBpnXs9XJXbk7dCWoWIuwm8+R2svcGvdiIrVGMy9cCP4bIqNzZ7NlOAvIysgmnLcv5GsTv7YfBXrJFnBXScsacqJaH3BLVg+zVYXKvokjZJ0mEa260aMqJDS7lK+xbnBhwH3B+tOAaR7ZoB0c1j2JyFOjTLL9K1uw0dRyQB4b0ZWQ08ByNi1rYT/FHBHU/Jl1rocEUgwmUDFNFufIMwZQ==";
75
+
})
76
+
(mkSite {
77
+
name = "robin";
78
+
sshPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKKxTuK2A7wbXnjkIhDrze4B5Uj2rnpmPAWGjPDMPiyk";
79
+
canonical = "robinwobin.dev";
80
})
81
];
82