misctesting

1 files changed, 33 insertions, 0 deletions

diff --git a/machines/iridium.nix b/machines/iridium.nix
index ef3d55b..01e4b86 100644
--- a/machines/iridium.nix
+++ b/machines/iridium.nix
@@ -15,10 +15,43 @@
   ];
 
   depot.net = {
+    v6Token = "::0102";
     sshd.enable = true;
     sshd.publish = true;
   };
 
+  services.nginx.virtualHosts."kleidi.ca" = {
+    acmeRoot = null;
+    useACMEHost = "kleidi.ca";
+    addSSL = true;
+    root = pkgs.depot.web.site;
+  };
+
+  security.acme = {
+    acceptTerms = true;
+
+    defaults = {
+      email = "certs@4kb.net";
+      dnsProvider = "porkbun";
+      environmentFile = "/persist/porkbun";
+      group = config.services.nginx.group;
+    };
+
+    certs."kleidi.ca".extraDomainNames = [ "*.kleidi.ca" ];
+    certs."4kb.net".extraDomainNames = [ "*.4kb.net" ];
+  };
+
+  services.redlib.enable = true;
+  services.nginx.virtualHosts."redlib.4kb.net" = {
+    acmeRoot = null;
+    useACMEHost = "4kb.net";
+    forceSSL = true;
+    locations."/" = {
+      extraConfig = "proxy_http_version 1.1;";
+      proxyPass = "http://${config.services.redlib.address}:${toString config.services.redlib.port}";
+    };
+  };
+
   xnet = {
     disk = {
       enable = true;