move yisroelbaum web stack into module

This commit is contained in:
Yisroel Baum 2026-07-31 11:30:25 +03:00
parent 5406f8c991
commit 92d6e4bad7
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
8 changed files with 81 additions and 204 deletions

View file

@ -1,8 +1,5 @@
{
config,
pkgs,
domainName,
resume,
...
}:
{
@ -10,7 +7,6 @@
[ # Include the results of the hardware scan.
./hardware-configuration.nix
./borgbackup.nix
./forgejo.nix
./boot.nix
];
@ -99,46 +95,6 @@
# Install firefox.
programs.firefox.enable = true;
users.users.nginx.extraGroups = [ "acme" ];
services.nginx = {
enable = true;
virtualHosts = {
"${domainName}" = {
forceSSL = true;
enableACME = true;
locations = {
"/" = {
root = "${resume.packages.x86_64-linux.default}";
};
};
};
"jellyfin.${domainName}" = {
forceSSL = true;
enableACME = true;
locations = {
"/" = {
proxyPass = "http://localhost:8096";
};
};
};
};
};
security.acme = {
defaults.webroot = "/var/lib/acme/acme-challenge/";
acceptTerms = true;
defaults.email = "yisroel.d.baum@gmail.com";
certs = {
"${domainName}" = {
domain = "*.${domainName}";
webroot = "/var/lib/acme/acme-challenge/";
group = config.services.nginx.group;
reloadServices = [
"nginx"
];
};
};
};
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
@ -159,10 +115,6 @@
# enableSSHSupport = true;
# };
services.jellyfin = {
enable = true;
};
# List services that you want to enable:
services.dnsmasq = {
enable = true;