hosts/chaski/services/woitb.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

{ config, lib, pkgs, ... }:

let
  #sources = ../../nix/sources.nix;
  sources = /home/stuebinm/Dokumente/utils/playground/ilztal/server;
in
{
  systemd.services.woitb = {
    enable = true;
    description = "wo ist die ilztalbahn?";
    wantedBy = [ "multi-user.target" ];
    serviceConfig.type = "simple";
    script = "${import sources}/bin/woitb";
  };

  services.nginx.virtualHosts."ilztal.live" = {
    enableACME = true;
    forceSSL = true;
    locations."/".root = pkgs.copyPathToStore
      /home/stuebinm/Dokumente/utils/playground/ilztal/site;

    locations."/upnext".proxyPass = "http://localhost:8000";
    locations."/geoloc".proxyPass = "http://localhost:8000";
  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  services.nginx.appendHttpConfig = ''
     access_log off;
     add_header Permissions-Policy "interest-cohort=()";
  '';
}