Initial server configuration

modules/disk-config.nix

@@ -0,0 +1,38 @@
+{ lib, ... }:
+{
+    disko.devices.disk.os = {
+        # device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_110097335";
+        device = lib.mkDefault "/dev/sda";
+        type = "disk";
+        content = {
+            type = "gpt";
+            partitions = {
+                boot = {
+                    type = "EF02";
+                    size = "1M";
+                };
+                ESP = {
+                    type = "EF00";
+                    size = "512M";
+                    content = {
+                        type = "filesystem";
+                        format = "vfat";
+                        mountpoint = "/boot";
+                    };
+                };
+                root = {
+                    size = "100%";
+                    content = {
+                        type = "filesystem";
+                        format = "xfs";
+                        mountpoint = "/";
+                        mountOptions = [
+                            "defaults"
+                            "pquota"
+                        ];
+                    };
+                };
+            };
+        };
+    };
+}

modules/gitea.nix

@@ -0,0 +1,13 @@
+{config, ...}:
+{
+    services.gitea = {
+        enable = true;
+
+        settings = {
+            service.DISABLE_REGISTRATION = true;
+            server = {
+                ROOT_URL = "https://seed.tty.garden/";
+            };
+        };
+    };
+}

modules/nginx.nix

@@ -0,0 +1,59 @@
+{config, ...}:
+{
+    security.acme = {
+        acceptTerms = true;
+        defaults.email = "nickmcdaniel00@gmail.com";
+
+        certs."tty.garden" = {
+            dnsProvider = "porkbun";
+            environmentFile = "/root/dns_environment";
+
+            extraDomainNames = [
+                "*.tty.garden"
+            ];
+
+            group = config.services.nginx.group;
+            reloadServices = [
+                "nginx"
+            ];
+        };
+    };
+
+    systemd.tmpfiles.rules = [
+        # Core Web Directory
+        "d /var/www/tty.garden - root nginx -"
+        # Mirrors
+        "d /var/www/mirror - root nginx -"
+        "d /var/www/mirror/maple - ahill nginx -"
+    ];
+
+    services.nginx =
+    let vhostDefault = {
+        addSSL = true;
+        useACMEHost = "tty.garden";
+        acmeRoot = null;
+    }; in {
+        enable = true;
+        
+        virtualHosts = {
+            "tty.garden" = vhostDefault // {
+                root = "/var/www/tty.garden";
+
+                # TODO: User public_html folders
+                # Use disable symlinks with `if_not_owner` and from=$HOME for user
+            };
+            "seed.tty.garden" = vhostDefault // {
+                locations."/" = {
+                    proxyPass = "http://127.0.0.1:3000";
+                };
+            };
+            "mirror.tty.garden" = vhostDefault // {
+                root = "/var/www/mirror";
+
+                locations."/" = {
+                    extraConfig = "autoindex on;";
+                };
+            };
+        };
+    };
+}