feat (hosts/mystra): nginx configuration

This commit is contained in:
Henri Saudubray 2026-02-17 13:29:37 +01:00
parent 45dc878b70
commit e21d82c393
Signed by: hms
GPG key ID: 7065F57ED8856128
2 changed files with 40 additions and 18 deletions

View file

@ -1,30 +1,26 @@
{ pkgs, ... }:
{ ... }:
{
imports = [
./hardware-configuration.nix
./disk-config.nix
../../nixos/common.nix
../../nixos/server.nix
];
boot.loader.grub = {
efiSupport = true;
efiInstallAsRemovable = true;
services.nginx = {
enable = true;
virtualHosts."henri-saudubray.fr" = {
enableACME = true;
forceSSL = true;
root = "/home/hms/www";
};
};
services.openssh.enable = true;
networking.firewall.allowedTCPPorts = [ 80 443 ];
environment.systemPackages = [
pkgs.curl
pkgs.gitMinimal
];
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/RpQqBYdXKNjLLpRWq04NJHD7mODOjwjpmqnQ6qppp hms@nixos-selune"
];
users.users.hms.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/RpQqBYdXKNjLLpRWq04NJHD7mODOjwjpmqnQ6qppp hms@nixos-selune"
];
security.acme = {
acceptTerms = true;
defaults.email = "henri.saudubray@proton.me";
};
networking.hostName = "mystra";
system.stateVersion = "25.11";