This repository has no description
3.4 kB
68 lines
1{ pkgs, ... }:
2{
3 services.nginx.virtualHosts."docs.c3gsm.de" = {
4 forceSSL = true;
5 enableACME = true;
6 locations."/".extraConfig = ''
7 auth_basic "Restricted Content";
8 auth_basic_user_file ${pkgs.writeText "c3gsm-user-pass" ''
9 c3gsm:$2y$05$GS87dXPIqbAVb3bOIFMj7.gX.D7c3AEYPrkeIG5s113F22/0p.LD2
10 ''};
11 root /srv/http/docs.c3gsm.de;
12 '';
13 };
14
15 services.nginx.virtualHosts."c3gsm.de" = {
16 forceSSL = true;
17 enableACME = true;
18 root = "/srv/http/c3gsm.de/wwwroot";
19 locations."/" = {
20 tryFiles = "$uri $uri/ $uri.html =404";
21 };
22 };
23
24 systemd.services."c3gsm-website-cleanup-preview" = {
25 script = ''
26 set -eu
27 ${pkgs.findutils}/bin/find \
28 /srv/http/c3gsm.de/wwwroot/pre \
29 -mindepth 1 \
30 -ctime +7 \
31 -delete
32 '';
33 startAt = "daily";
34 serviceConfig = {
35 Type = "oneshot";
36 User = "c3gsm";
37 };
38 };
39
40 users.users.c3gsm-docs = {
41 isNormalUser = true;
42 home = "/srv/http/docs.c3gsm.de";
43 createHome = true;
44 homeMode = "750";
45 useDefaultShell = true;
46 group = "nginx";
47 openssh.authorizedKeys.keys = [
48 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlW1fvCrVXhVH/z76fXBWYR/qyecYTE9VOOkFLJ6OwG user@osmocom-dev"
49 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBV1+1YcOyLA16i9tPDMZsdMKNfVkh884QQGQkHy7L7t gitlab-deployment"
50 "ssh-rsa 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 openpgp:0xB565044B"
51 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAv5PvopW5HjYQQeuhKV4Q9+/hR3aNRwIvYJ86yTG4yP c3gsmdocs_gitlab_ci"
52 ];
53 };
54
55 users.users.c3gsm = {
56 isNormalUser = true;
57 home = "/srv/http/c3gsm.de";
58 createHome = true;
59 homeMode = "750";
60 useDefaultShell = true;
61 group = "nginx";
62 openssh.authorizedKeys.keys = [
63 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlW1fvCrVXhVH/z76fXBWYR/qyecYTE9VOOkFLJ6OwG user@osmocom-dev"
64 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBV1+1YcOyLA16i9tPDMZsdMKNfVkh884QQGQkHy7L7t gitlab-deployment"
65 "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDrhZNSJ7Yqr+DuwQLSRdZXcEPs0cnH87T+6tg4dbzZSVuxEWuGPeo1SR7XU0l7Ut4n/HhBLu1Lw+BeIsH2FbbeLP5QnYEWaCDpaQxy8SYb+6tn7x6GxG0at4hrdk3vm+UAltqhBQLvpZGfLEvGr+E1e0GfQq0y2MU6glqzmOP43h8XcJ7htTGkduuO947K7WTcv5QaN7Mc1uR+a1EvJ2N+t09x1Hl0sm6MwJvPv88AzrmmOWfikJre7XQspmb5XpecNzSAPZ187MQj8XTqzky4RQFo76/yzn++5XCdjJNGOiJb+W5ob+CXJqdwdBZGyo7n4ZNMfqNV3H1Me3XMunjwwnKczO6nN9iQzTQyjqeMsz4p51iz1ccjXvnKgo5NTff+FwU643LYNH3y9WdzqgLkoGR5R7Dy05qSOOQ2dGPGZi18h2iYTz5/OjjJsU+0bIaY0YGkIbVRhFDvToHew09VLSd7nWOqGIrnINwNsPYc7THOn0ys+RTcMPlxE92lIHaKBUl/+a+q5IGzwMEJfY9kuo2GtEiwfe1gWo7nX4O0hE/B1aqbQ9umrVo/CTNvqOHI+tr/LwQYoyWRFlKEZNqFtOdyw6lf+g4CvmupIct9IEYWMLi7L03i6vhnBUf8aQuguC3FCOC3lBdo2hecw29i8j0F87a1rsVRFm2CDHsOQQ== openpgp:0xB565044B"
66 ];
67 };
68}