Initial server configuration

2026-01-22 10:50:59 -05:00
commit 0e39daf16b
6 changed files with 212 additions and 0 deletions
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -0,0 +1,59 @@
+{config, ...}:
+{
+    security.acme = {
+        acceptTerms = true;
+        defaults.email = "nickmcdaniel00@gmail.com";
+
+        certs."tty.garden" = {
+            dnsProvider = "porkbun";
+            environmentFile = "/root/dns_environment";
+
+            extraDomainNames = [
+                "*.tty.garden"
+            ];
+
+            group = config.services.nginx.group;
+            reloadServices = [
+                "nginx"
+            ];
+        };
+    };
+
+    systemd.tmpfiles.rules = [
+        # Core Web Directory
+        "d /var/www/tty.garden - root nginx -"
+        # Mirrors
+        "d /var/www/mirror - root nginx -"
+        "d /var/www/mirror/maple - ahill nginx -"
+    ];
+
+    services.nginx =
+    let vhostDefault = {
+        addSSL = true;
+        useACMEHost = "tty.garden";
+        acmeRoot = null;
+    }; in {
+        enable = true;
+        
+        virtualHosts = {
+            "tty.garden" = vhostDefault // {
+                root = "/var/www/tty.garden";
+
+                # TODO: User public_html folders
+                # Use disable symlinks with `if_not_owner` and from=$HOME for user
+            };
+            "seed.tty.garden" = vhostDefault // {
+                locations."/" = {
+                    proxyPass = "http://127.0.0.1:3000";
+                };
+            };
+            "mirror.tty.garden" = vhostDefault // {
+                root = "/var/www/mirror";
+
+                locations."/" = {
+                    extraConfig = "autoindex on;";
+                };
+            };
+        };
+    };
+}