From 4724971ef468ad792f56527f6b7ce570bf62601e Mon Sep 17 00:00:00 2001
From: stuebinm
Date: Fri, 19 Mar 2021 23:08:35 +0100
Subject: simplify and deduplicate chaski config

---
 hosts/chaski/services/cgit.nix | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

(limited to 'hosts/chaski/services/cgit.nix')

diff --git a/hosts/chaski/services/cgit.nix b/hosts/chaski/services/cgit.nix
index abe69e5..7ce041c 100644
--- a/hosts/chaski/services/cgit.nix
+++ b/hosts/chaski/services/cgit.nix
@@ -11,7 +11,7 @@
       hostPath = "/var/git/public";
       isReadOnly = true;
     };
-    
+
     config = {pkgs, config, ...}: {
       services.lighttpd.enable = true;
       services.lighttpd.extraConfig = ''server.use-ipv6 = "enable"'';
@@ -75,5 +75,19 @@
   };
 
   services.nginx.recommendedProxySettings = true;
-  services.nginx.virtualHosts."stuebinm.eu".locations."/git/".proxyPass = "http://[${config.containers.cgit.localAddress6}]";
+  services.nginx.virtualHosts."stuebinm.eu" = {
+    locations."/git/".proxyPass = "http://[${config.containers.cgit.localAddress6}]";
+    enableACME = true;
+    forceSSL = true;
+  };
+
+  # user for git repo administration
+  users.users.git = {
+    openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
+    home = "/var/git";
+    isNormalUser = true;
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
 }
-- 
cgit v1.2.3