From ba9412966f462a18f913cb22d9be3aae9728230f Mon Sep 17 00:00:00 2001 From: =?utf8?q?Isma=C3=ABl=20Bouya?= Date: Sat, 23 May 2020 03:37:06 +0200 Subject: [PATCH] Add discourse on dilion (via docker) --- modules/private/system/dilion.nix | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/modules/private/system/dilion.nix b/modules/private/system/dilion.nix index 4860d07..d8bad6b 100644 --- a/modules/private/system/dilion.nix +++ b/modules/private/system/dilion.nix @@ -107,6 +107,36 @@ nix.binaryCaches = [ "https://hydra.iohk.io" "https://cache.nixos.org" ]; nix.binaryCachePublicKeys = [ "hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=" ]; + myServices.certificates.enable = true; + security.acme.certs."${name}" = { + user = config.services.nginx.user; + group = config.services.nginx.group; + extraDomains = { + "discourse.immae.eu" = null; + "discourse.cip-ca.fr" = null; + }; + }; + services.nginx = { + enable = true; + recommendedOptimisation = true; + recommendedGzipSettings = true; + recommendedProxySettings = true; + virtualHosts = { + "discourse.immae.eu" = { + acmeRoot = config.myServices.certificates.webroot; + useACMEHost = name; + forceSSL = true; + locations."/".proxyPass = "http://localhost:18031"; + }; + "discourse.cip-ca.fr" = { + acmeRoot = config.myServices.certificates.webroot; + useACMEHost = name; + forceSSL = true; + locations."/".proxyPass = "http://localhost:18031"; + }; + }; + }; + # This value determines the NixOS release with which your system is # to be compatible, in order to avoid breaking some software such as # database servers. You should change this only after NixOS release -- 2.41.0