ctucx.git: nixfiles

ctucx' nixfiles

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
{ config, pkgs, lib, ... }:

{

#  dns.zones."ctu.cx".subdomains."audiobooks.home".CNAME = [ "${config.networking.fqdn}." ];
  services.dnsmasq.settings.cname                       = [ "audiobooks.home.ctu.cx, ${config.networking.fqdn}" ];

  fileSystems."/mnt/audiobooks" = {
    device = "/nix/persist/home/katja/syncthing/Audiobooks";
    options = [ "bind" "ro" ];
  };

  services.nginx = {
    enable = true;
    virtualHosts."audiobooks.home.ctu.cx" = {
      enableACME = lib.mkIf config.networking.usePBBUplink true;
      forceSSL   = lib.mkIf config.networking.usePBBUplink true;
      kTLS       = lib.mkIf config.networking.usePBBUplink true;

      locations = {
        "/jdfoniobhfijnfoilp[dfponbiuyfbu/".alias = "/mnt/audiobooks/";
      };

      extraConfig = ''
#       auth_basic 'Auth required';
#       auth_basic_user_file ${pkgs.writeText "auth-file" "giveme:$apr1$Em5EfPWk$kYnKJF1mIsd2h4heYNfEB."};
      '';
    };
  };

}