configure diday.org on public-static-web

This commit is contained in:
lilly 2026-02-26 18:01:34 +01:00
commit 99efc60fce
Signed by: lilly
SSH key fingerprint: SHA256:y9T5GFw2A20WVklhetIxG1+kcg/Ce0shnQmbu1LQ37g
3 changed files with 144 additions and 124 deletions

View file

@ -19,7 +19,7 @@
./staging.hamburg.ccc.de.nix
./www.hamburg.ccc.de.nix
./staging.did.hamburg.ccc.de.nix
./did.hamburg.ccc.de.nix
./diday.org.nix
./historic-easterhegg
];
}

View file

@ -1,12 +1,14 @@
{ ... }:
let
domain = "did.hamburg.ccc.de";
domain = "diday.org";
dataDir = "/var/www/${domain}";
deployUser = "diday-website-deploy";
in
{
# security.acme.certs."${domain}".extraDomainNames = [];
security.acme.certs."${domain}".extraDomainNames = [
"did.hamburg.ccc.de"
];
services.nginx.virtualHosts = {
"acme-${domain}" = {
@ -21,6 +23,24 @@ in
];
};
"did.hamburg.ccc.de" = {
forceSSL = true;
useACMEHost = "${domain}";
listen = [
{
addr = "0.0.0.0";
port = 8443;
ssl = true;
proxyProtocol = true;
}
];
extraConfig = ''
return 301 https://diday.org;
'';
};
"${domain}" = {
forceSSL = true;
useACMEHost = "${domain}";