From: Ismaël Bouya <ismael.bouya@normalesup.org>
Date: Sat, 23 May 2020 01:37:06 +0000 (+0200)
Subject: Add discourse on dilion (via docker)
X-Git-Url: https://git.immae.eu/?a=commitdiff_plain;ds=sidebyside;h=ba9412966f462a18f913cb22d9be3aae9728230f;hp=46b7e62708f01eaefef78341819643eeceea8130;p=perso%2FImmae%2FConfig%2FNix.git

Add discourse on dilion (via docker)
---

diff --git a/modules/private/system/dilion.nix b/modules/private/system/dilion.nix
index 4860d07..d8bad6b 100644
--- a/modules/private/system/dilion.nix
+++ b/modules/private/system/dilion.nix
@@ -107,6 +107,36 @@
   nix.binaryCaches = [ "https://hydra.iohk.io" "https://cache.nixos.org" ];
   nix.binaryCachePublicKeys = [ "hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=" ];
 
+  myServices.certificates.enable = true;
+  security.acme.certs."${name}" = {
+    user = config.services.nginx.user;
+    group = config.services.nginx.group;
+    extraDomains = {
+      "discourse.immae.eu" = null;
+      "discourse.cip-ca.fr" = null;
+    };
+  };
+  services.nginx = {
+    enable = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    recommendedProxySettings = true;
+    virtualHosts = {
+      "discourse.immae.eu" = {
+        acmeRoot = config.myServices.certificates.webroot;
+        useACMEHost = name;
+        forceSSL = true;
+        locations."/".proxyPass = "http://localhost:18031";
+      };
+      "discourse.cip-ca.fr" = {
+        acmeRoot = config.myServices.certificates.webroot;
+        useACMEHost = name;
+        forceSSL = true;
+        locations."/".proxyPass = "http://localhost:18031";
+      };
+    };
+  };
+
   # This value determines the NixOS release with which your system is
   # to be compatible, in order to avoid breaking some software such as
   # database servers. You should change this only after NixOS release