34 lines
686 B
Nix
34 lines
686 B
Nix
{
|
|
config,
|
|
domainName,
|
|
...
|
|
}:
|
|
{
|
|
services.rabbi-gerzi = {
|
|
enable = true;
|
|
frontend = {
|
|
hostName = "rabbigerzi.${domainName}";
|
|
nginx = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
};
|
|
};
|
|
backend = {
|
|
hostName = "rabbigerziapi.${domainName}";
|
|
environmentFile = config.sops.secrets."rabbi-gerzi-env".path;
|
|
nginx = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
sops.secrets."rabbi-gerzi-env" = {
|
|
sopsFile = ./secrets/rabbi-gerzi.env;
|
|
format = "dotenv";
|
|
key = "";
|
|
mode = "0400";
|
|
owner = config.services.rabbi-gerzi.user;
|
|
group = config.services.rabbi-gerzi.group;
|
|
};
|
|
}
|