update dependencies, add zerforschen.plus to lpt2 as a test

hosts/vinzenz-lpt2/configuration.nix

@@ -1,6 +1,6 @@
 { ... }:
 {
-  imports = [ ./nginx.nix ];
+  imports = [ ./zerforschen-plus.nix ];
 
   config = {
     networking.networkmanager.enable = true;
@@ -37,5 +37,7 @@
         };
       };
     };
+
+    networking.firewall.allowedTCPPorts = [ 8776 ];
   };
 }

hosts/vinzenz-lpt2/zerforschen-plus.nix

@@ -0,0 +1,40 @@
+{
+  pkgs,
+  system,
+  inputs,
+  ...
+}:
+{
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "acme@zerforschen.plus";
+  };
+
+  security.pam.services.nginx.setEnvironment = false;
+  systemd.services.nginx.serviceConfig = {
+    SupplementaryGroups = [ "shadow" ];
+  };
+
+  services.nginx = {
+    enable = true;
+    additionalModules = [ pkgs.nginxModules.pam ];
+
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+
+    virtualHosts = {
+      "zerforschen.plus" = {
+        #addSSL = true;
+        #enableACME = true;
+        root = inputs.zerforschen-plus.packages."${pkgs.system}".zerforschen-plus-content;
+      };
+    };
+  };
+
+  #networking.firewall.allowedTCPPorts = [
+  #  80
+  #  443
+  #];
+}