44 lines
1.2 KiB
Nix
44 lines
1.2 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
with lib;
|
|
let
|
|
cfg = config.krebs.retiolum-bootstrap;
|
|
in
|
|
{
|
|
options.krebs.retiolum-bootstrap = {
|
|
enable = mkEnableOption "retiolum boot strap for ${cfg.serverName}";
|
|
serverName = mkOption {
|
|
type = types.str;
|
|
description = "hostname which serves tinc boot";
|
|
default = "tinc.krebsco.de" ;
|
|
};
|
|
sslCertificate = mkOption {
|
|
type = types.str;
|
|
description = "Certificate file to use for ssl";
|
|
default = "${toString <secrets>}/tinc.krebsco.de.crt" ;
|
|
};
|
|
sslCertificateKey = mkOption {
|
|
type = types.str;
|
|
description = "Certificate key to use for ssl";
|
|
default = "${toString <secrets>}/tinc.krebsco.de.key";
|
|
};
|
|
# in use:
|
|
# <secrets/tinc.krebsco.de.crt>
|
|
# <secrets/tinc.krebsco.de.key>
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
services.nginx = {
|
|
enable = mkDefault true;
|
|
virtualHosts.retiolum-bootstrap = {
|
|
inherit (cfg) serverName sslCertificate sslCertificateKey;
|
|
forceSSL = true;
|
|
extraConfig =''
|
|
|
|
root ${pkgs.retiolum-bootstrap};
|
|
try_files $uri $uri/retiolum.sh;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|