diff --git a/rabbi-gerzi.nix b/rabbi-gerzi.nix index 8da51b0..e779de5 100644 --- a/rabbi-gerzi.nix +++ b/rabbi-gerzi.nix @@ -10,22 +10,34 @@ borgPrivateKey = config.sops.secrets."borg-private-key".path; }; frontend = { - hostName = "rabbigerzi.yisroelbaum.com"; + hostName = "rabbigerzi.com"; nginx = { forceSSL = true; enableACME = true; + serverAliases = [ "rabbigerzi.yisroelbaum.com" ]; }; }; backend = { - hostName = "rabbigerziapi.yisroelbaum.com"; + hostName = "api.rabbigerzi.com"; environmentFile = config.sops.secrets."rabbi-gerzi-env".path; + corsAllowedOrigins = [ + "https://rabbigerzi.com" + "https://rabbigerzi.yisroelbaum.com" + ]; nginx = { forceSSL = true; enableACME = true; + serverAliases = [ "rabbigerziapi.yisroelbaum.com" ]; }; }; }; + services.nginx.virtualHosts."www.rabbigerzi.com" = { + forceSSL = true; + enableACME = true; + globalRedirect = "rabbigerzi.com"; + }; + sops.secrets."rabbi-gerzi-env" = { sopsFile = ./secrets/rabbi-gerzi.env; format = "dotenv";