From 9936e252d81bc4e46225dbfba0cc873c747eab47 Mon Sep 17 00:00:00 2001
From: catvayor <catvayor@katvayor.net>
Date: Wed, 21 Aug 2024 19:50:37 +0200
Subject: [PATCH] got (www.)?simply-wise.fr

---
 domain-proxies.nix                |  5 +++-
 machines/kat-orchid/building.html | 22 ++++++++++++++++
 machines/kat-orchid/default.nix   | 42 +++++++++++++++++++++++++++++++
 3 files changed, 68 insertions(+), 1 deletion(-)
 create mode 100644 machines/kat-orchid/building.html
diff --git a/domain-proxies.nix b/domain-proxies.nix
index b49bb28..d4aa516 100644
--- a/domain-proxies.nix
+++ b/domain-proxies.nix
@@ -37,7 +37,10 @@
           "orchid.katvayor.net" = {
             ssh = 22042;
             ip = "192.168.122.6";
-            aliases = [ ];
+            aliases = [
+              "simply-wise.fr"
+              "www.simply-wise.fr"
+            ];
           };
         };
       };
diff --git a/machines/kat-orchid/building.html b/machines/kat-orchid/building.html
new file mode 100644
index 0000000..df0d547
--- /dev/null
+++ b/machines/kat-orchid/building.html
@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+    <meta charset="utf-8">
+    <meta name="color-scheme" content="light dark">
+    <title>503 Service Unavailable</title>
+</head>
+<body align="center">
+    <div role="main" align="center">
+        <h1>503 Service Unavailable</h1>
+        <img src="https://http.cat/503.jpg"/>
+        <hr />
+    </div>
+    <div role="contentinfo" align="center">
+      Ce site est en cours de construction, repassez plus tard, merci.
+      <br/>
+      <small>Crédit à <a href="https://http.cat">http.cat</a> pour l'image.</small>
+      <br/>
+      <small>Error in kat-orchid.</small>
+    </div>
+</body>
+</html>
diff --git a/machines/kat-orchid/default.nix b/machines/kat-orchid/default.nix
index 8a2b707..6d40a5b 100644
--- a/machines/kat-orchid/default.nix
+++ b/machines/kat-orchid/default.nix
@@ -81,6 +81,10 @@
   security.acme = {
     acceptTerms = true;
     defaults.email = "root@katvayor.net";
+    certs."orchid.katvayor.net".extraDomainNames = [
+      "simply-wise.fr"
+      "www.simply-wise.fr"
+    ];
   };
   services.nginx = {
     enable = true;
@@ -92,6 +96,21 @@
           alias = "/srv/orchid/";
         };
       };
+      "simply-wise.fr" = {
+        useACMEHost = "orchid.katvayor.net";
+        forceSSL = true;
+        serverAliases = [ "www.simply-wise.fr" ];
+        locations."/" = {
+          root = pkgs.runCommand "building" { } ''
+            mkdir -p $out
+            ln -nsf ${./building.html} $out/building.html
+          '';
+          extraConfig = ''
+            internal;
+            error_page 404 =503 /building.html;
+          '';
+        };
+      };
     };
   };
   services.wordpress = {
@@ -102,6 +121,29 @@
     device = "/srv/orchid";
     options = [ "bind" ];
   };
+  systemd = {
+    tmpfiles.settings."10-srv-orchid"."/srv/orchid" = {
+      d = {
+        group = "users";
+        user = "orchid";
+      };
+      Z = {
+        group = "users";
+        user = "orchid";
+        mode = "0755";
+      };
+    };
+    timers.srv-tmpfiles = {
+      wantedBy = [ "timers.target" ];
+      timerConfig.OnCalendar = "*-*-* *:*:07..57/10";
+    };
+    services.srv-tmpfiles = {
+      path = [ pkgs.systemd ];
+      script = ''
+        systemd-tmpfiles --create --prefix=/srv
+      '';
+    };
+  };
 
   users.users.orchid = {
     isNormalUser = true;
