fix fqdn

hosts/md/hedgedoc.nix

@@ -4,7 +4,7 @@
   services.hedgedoc = {
     enable = true;
     settings = {
-      domain = "${config.networking.hostName}.${config.networking.domain}";
+      domain = "${config.networking.fqdn}";
       #environmentFile = config.age.secrets.hedgedoc_settings.path;
       protocolUseSSL = true;
       db = {

hosts/md/nginx.nix

@@ -4,7 +4,7 @@ let
   cfg = config.services.hedgedoc.settings;
 in
 {
-  nginx.virtualHosts."${fqdn}" = {
+  nginx.virtualHosts."${config.networking.fqdn}" = {
     default = true;
     quic = true;
     kTLS = true;

hosts/www/default.nix

@@ -4,9 +4,9 @@
   imports = [
     ../common.nix
     ../../services/openssh.nix
+    ./openssh.nix
     ../../services/nginx.nix
     ./nginx.nix
-    ./ssh.nix
   ];
 
   networking = {

hosts/www/nginx.nix

@@ -4,7 +4,7 @@ let
   # TODO: mkVHost
 in
 {
-  services.nginx.virtualHosts."${config.networking.hostName}.${config.networking.domain}" = {
+  services.nginx.virtualHosts."${config.networking.fqdn}" = {
     default = true;
     serverAliases = [config.networking.domain];
     quic = true;

hosts/www/openssh.nix

@@ -0,0 +1,16 @@
+{ pkgs, ... }:
+
+{
+  users.users.deploy = {
+    description = "deploys static websites from forgejo";
+    shell = pkgs.nologin;
+    packages = [
+      pkgs.rsync
+    ];
+    openssh.authorizedKeys.keys = [
+      "command='rsync --server --daemon . /srv/http/www/',restrict ssh-ed25519 AAAAB3NzaC1yc2EAAAADAQABAAABAQCy... git.berlin.ccc.de/cccb/www"
+    ];
+    #extraGroups = ["nginx"];
+  };
+}
+