50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{
|
|
config,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}: let
|
|
PUBLIC_BASE_URL = "https://gaze.systems";
|
|
pkg = inputs.blog.packages.${pkgs.system}.default.overrideAttrs (old: {
|
|
inherit PUBLIC_BASE_URL;
|
|
GUESTBOOK_BASE_URL = "http://localhost:8080";
|
|
});
|
|
port = 3003;
|
|
in {
|
|
users.users.website = {
|
|
isSystemUser = true;
|
|
group = "website";
|
|
};
|
|
users.groups.website = {};
|
|
|
|
systemd.services.website = {
|
|
description = "website";
|
|
wantedBy = ["multi-user.target"];
|
|
after = ["network.target" "guestbook.service"];
|
|
environment = {
|
|
HOME = "/var/lib/website";
|
|
ORIGIN = PUBLIC_BASE_URL;
|
|
PORT = toString port;
|
|
};
|
|
serviceConfig = {
|
|
User = "website";
|
|
ExecStart = "${pkg}/bin/website";
|
|
Restart = "on-failure";
|
|
RestartSec = 5;
|
|
WorkingDirectory = "/var/lib/website";
|
|
EnvironmentFile = config.age.secrets.websiteConfig.path;
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."gaze.systems" = {
|
|
useACMEHost = "gaze.systems";
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://localhost:${toString port}";
|
|
extraConfig = ''
|
|
add_header cache-control "no-store";
|
|
'';
|
|
};
|
|
};
|
|
}
|