From 3704a2800fc9133e8d2eeaf873c9f3b77d878c98 Mon Sep 17 00:00:00 2001
From: Yisroel Baum <yisroel.d.baum@gmail.com>
Date: Mon, 17 Aug 2026 21:19:36 +0300
Subject: [PATCH] configure production domains

---
 rabbi-gerzi.nix | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/rabbi-gerzi.nix b/rabbi-gerzi.nix
index 8da51b0..e779de5 100644
--- a/rabbi-gerzi.nix
+++ b/rabbi-gerzi.nix
@@ -10,22 +10,34 @@
       borgPrivateKey = config.sops.secrets."borg-private-key".path;
     };
     frontend = {
-      hostName = "rabbigerzi.yisroelbaum.com";
+      hostName = "rabbigerzi.com";
       nginx = {
         forceSSL = true;
         enableACME = true;
+        serverAliases = [ "rabbigerzi.yisroelbaum.com" ];
       };
     };
     backend = {
-      hostName = "rabbigerziapi.yisroelbaum.com";
+      hostName = "api.rabbigerzi.com";
       environmentFile = config.sops.secrets."rabbi-gerzi-env".path;
+      corsAllowedOrigins = [
+        "https://rabbigerzi.com"
+        "https://rabbigerzi.yisroelbaum.com"
+      ];
       nginx = {
         forceSSL = true;
         enableACME = true;
+        serverAliases = [ "rabbigerziapi.yisroelbaum.com" ];
       };
     };
   };
 
+  services.nginx.virtualHosts."www.rabbigerzi.com" = {
+    forceSSL = true;
+    enableACME = true;
+    globalRedirect = "rabbigerzi.com";
+  };
+
   sops.secrets."rabbi-gerzi-env" = {
     sopsFile = ./secrets/rabbi-gerzi.env;
     format = "dotenv";