This commit is contained in:
XenGi 2026-02-13 19:06:13 +01:00
parent 5807b563a1
commit ff5cb096de
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
2 changed files with 19 additions and 14 deletions

View file

@ -4,17 +4,17 @@ let
# TODO: mkVHost # TODO: mkVHost
in in
{ {
services.nginx.virtualHosts."${config.networking.fqdn}" = { services.nginx.virtualHosts."www.${config.networking.domain}" = {
default = true; default = true;
serverAliases = [config.networking.domain]; serverAliases = [config.networking.domain];
quic = true; quic = true;
kTLS = true; kTLS = true;
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = {
root = "/srv/http/www"; root = "/srv/http/www";
index = "index.html"; index = "index.html";
locations."/" = { tryFiles = "$uri $uri/ $uri.html =404";
try_files = "$uri $uri/ $uri.html =404";
}; };
}; };
} }

View file

@ -1,9 +1,12 @@
{ pkgs, ... }: { pkgs, ... }:
{ {
users.users.deploy = { users = {
users.deploy = {
description = "deploys static websites from forgejo"; description = "deploys static websites from forgejo";
shell = pkgs.nologin; shell = "/run/current-system/sw/bin/nologin";
isSystemUser = true;
group = "deploy";
packages = [ packages = [
pkgs.rsync pkgs.rsync
]; ];
@ -12,5 +15,7 @@
]; ];
#extraGroups = ["nginx"]; #extraGroups = ["nginx"];
}; };
groups.deploy = {};
};
} }