stockholm/krebs/3modules/retiolum-bootstrap.nix
2018-08-29 00:49:00 +02:00

44 lines
1.2 KiB
Nix

{ config, pkgs, ... }:
with import <stockholm/lib>;
let
cfg = config.krebs.retiolum-bootstrap;
in
{
options.krebs.retiolum-bootstrap = {
enable = mkEnableOption "retiolum boot strap for ${cfg.serverName}";
serverName = mkOption {
type = types.str;
description = "hostname which serves tinc boot";
default = "tinc.krebsco.de" ;
};
sslCertificate = mkOption {
type = types.str;
description = "Certificate file to use for ssl";
default = "${toString <secrets>}/tinc.krebsco.de.crt" ;
};
sslCertificateKey = mkOption {
type = types.str;
description = "Certificate key to use for ssl";
default = "${toString <secrets>}/tinc.krebsco.de.key";
};
# in use:
# <secrets/tinc.krebsco.de.crt>
# <secrets/tinc.krebsco.de.key>
};
config = mkIf cfg.enable {
services.nginx = {
enable = mkDefault true;
virtualHosts.retiolum-bootstrap = {
inherit (cfg) serverName sslCertificate sslCertificateKey;
forceSSL = true;
extraConfig =''
root ${pkgs.retiolum-bootstrap};
try_files $uri $uri/retiolum.sh;
'';
};
};
};
}