web hosting

common/motd.nix

@@ -1,6 +1,9 @@
 {
   users.motd = ''
 Welcome to wolfgirl.systems!
-Latest news: flakes now enabled.
+Join our Matrix chat: #wolfgirlsgen:envs.net
+Latest news
+* Flakes now enabled
+* Web hosting now available, contact an admin to enable
 '';
 }

common/users.nix

@@ -35,6 +35,7 @@
     uid = 2003;
     isNormalUser = true;
     shell = pkgs.zsh;
+    homeMode = "755";
     openssh.authorizedKeys.keys  = [
       "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHp8yRnahmUS7l8STsx0pH25O4xTWGYQyQEWeKWxeM7gbkTNPGpiUswmsHgN8Ng0+FwjIw0FHkjQeLSMH9OTSB4= ipad0esp"
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJdN4a3yJUlKIaVezOe4hE8fRK9DkGSzwoZ9vfpsBsHh ide0"

hosts/stella-web.nix

@@ -0,0 +1,19 @@
+{
+  services.nginx.enable = true;
+  systemd.services.nginx.serviceConfig.ProtectHome = false;
+  services.nginx.virtualHosts."stella.wolfgirl.systems" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."~ \"^/~(.+?)(/.*)?$\"" = {
+      alias = "/home/$1/public_html$2";
+      index = "index.html";
+      extraConfig = ''
+        error_page 404 /~$1/404.html;
+      '';
+    };
+  };
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "me@ezri.pet";
+  };
+}

hosts/stella.nix

@@ -3,6 +3,7 @@
 {
   imports =
     [ (modulesPath + "/profiles/qemu-guest.nix")
+    ./stella-web.nix
     ];
 
   boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "sr_mod" "virtio_blk" ];