mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tazjin/camden): Configure Quassel core instance

Browse source 
I'm not actually sure if this will apply cleanly, because the new
NixOS ACME module is kind of broken.

Change-Id: I39584333dbea0a5f7b72e68d5e9f752a4c31bfe6
Reviewed-on: https://cl.tvl.fyi/c/depot/+/957
Tested-by: BuildkiteCI
Reviewed-by: tazjin <mail@tazj.in>
This commit is contained in:
Vincent Ambo 2020-07-08 23:03:07 +01:00 committed by tazjin
parent d6bf3207b0
commit e2e1579185
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
users/tazjin/nixos/camden/default.nix
View file

@ -18,6 +18,7 @@ in lib.fix(self: {
"${depot.depotPath}/ops/nixos/clbot.nix"
"${depot.depotPath}/ops/nixos/depot.nix"
"${depot.depotPath}/ops/nixos/monorepo-gerrit.nix"
"${depot.depotPath}/ops/nixos/quassel.nix"
"${depot.depotPath}/ops/nixos/smtprelay.nix"
"${depot.depotPath}/ops/nixos/sourcegraph.nix"
"${depot.depotPath}/ops/nixos/tvl-slapd/default.nix"
@ -220,6 +221,13 @@ in lib.fix(self: {
postRun = "systemctl reload nginx";
};
certs."quassel.tazj.in" = {
webroot = "/var/lib/acme/challenge-quassel";
user = "nginx"; # required because of a bug in the ACME module
group = "quassel";
allowKeysForGroup = true;
};
certs."tvl.fyi" = {
user = "nginx";
group = "nginx";
@ -288,6 +296,14 @@ in lib.fix(self: {
};
};
services.depot.quassel = {
enable = true;
acmeHost = "quassel.tazj.in";
bindAddresses = [
"0.0.0.0"
];
};
# serve my website(s)
services.nginx = {
enable = true;