pastila: srv

pastila/configuration.nix

@@ -12,6 +12,7 @@ in
       ./users.nix
       ./gitolite.nix
       ./letsencrypt.nix
+      ./srv.nix
     ];
 
   # Use the GRUB 2 boot loader.

pastila/srv.nix

@@ -0,0 +1,27 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.nginx.enable = true;
+
+  users.users."up" = {
+    isNormalUser = true;
+    group = config.services.nginx.group;
+    createHome = true;
+  };
+
+  services.nginx.virtualHosts."srv.isomorphis.me" = {
+    forceSSL = true;
+    enableACME = true;
+    root = config.users.users."up".home;
+    locations."/" = {
+      extraConfig = ''
+        autoindex on;
+      '';
+    };
+    locations."/i/" = {
+      extraConfig = ''
+        autoindex off;
+      '';
+    };
+  };
+}

pastila/users.nix

@@ -16,4 +16,13 @@
     ];
   };
 
+  users.users."jiquiame" = {
+    isNormalUser = true;
+    openssh.authorizedKeys.keys = [
+      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGRsJPeBVrLpAMQceGoI+3ar+0Iex+BwT03lA2VHmbZyBzgxQxTuEay6qSHF6ieZrMRZlMkb+sFaAZgEsb7v5E6brM4lP+5L/dRt81iLgyH6Vg8pYoeM4QgBMDMeXzi/VI6s5tWLGs5vbTeAiNGBVHvR4oUD5x89hcGY6/QWyWoqP+T18UtZFS78U+AZUsajIUyWDDIa4ucF7mx1N8VaFG/LshzIeR0bkuI3N2fFF0DWHc87a8FE6bA1EaOc5pX+VSjWnAZ56kC0WeMlY4bWu3L3sDYIp1G0uhPGrtqWAisjngg4f9POc3ZWL5rHzd+eZ4yabMC3VExF/ws4e0F8Rt gikiam@AntArch"
+      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnboYOOmlwjnJWxcD2+YimUZOJNxqHWu5QbDsxB4kzdB6U9EFVFKQefC9WKSliswtxb9xKMmm4PGS0tVZ6qM8nWFabA8nYxyrx4+eIVO676xk2iLF327aACcCuUiuNT0h5th1I28BIdJWdea1ZZmsmP0C/JM1KzhCVqCBi6LqZvQ57GW654ljIG85+kYX0pJvnjm0xAWeL85VOrJOdvSDqByp0P1ZFNsIEVhIwJiyKD1AX00vzMonM/I13/JxwCYzYmdjIletvEyxM2iDqzdWdeneO6qfOM87GEkupn0fUSeop4pWn7+Hd/DoT3SPRGzgJgsKbeByxqdI1iR5uIn6awPffvwncLg8d12OVU14Cq1J6upOHcPhA2CiP5qyLn8gpjYZ1Zo25PL5EksvWR/TRvCe8B+JDi0ZzOuKIpDlPyjhUH+Ww5ZZ4aygTjql5HvesAfh4uAwutMEs7KK5yeTi418l6GQHPw/VWFZUcMJv9O3QfqCmsv4vPtuOLDYuDzExyJT+TkRjESt2I+VVc73TE0tR3+wTiRzFSUMy2HI3MlaHJK3LSDfB6D6vpdCCYpgvbfx6ve8OnkdC64WtelXNRM4u6CQKcK+NW8JFkfgFqYPNOnTNECqlueL5PqWcaSG5diL+FoEaZrr3Z4lFP6a4dH4I5Q9Mv1e6EV4lIjZnRQ== ircphone"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIn4bm7k01s35DfOhrVOU0OW1v8b6vx7hmcr79za2pfJ m.pouille.antoine@gmail.com_peyotl-2024-03-06"
+    ];
+  };
+
 }

vars.nix

@@ -6,6 +6,7 @@
     # ports to open on pastila and forward through the NAT in oven
     forwardPorts = [
       { num = 80; proto = "tcp"; }
+      { num = 443; proto = "tcp"; }
       { num = 22; proto = "tcp"; }
     ];
   };