From 685a59210a4dd2f254d9c6d98267d1fb8c9a2333 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Sun, 23 Apr 2023 12:36:04 +0200
Subject: l neoprism.r: add gsm-wiki

---
 lass/1systems/neoprism/config.nix |  1 +
 lass/2configs/gsm-wiki.nix        | 26 ++++++++++++++++++++++++++
 2 files changed, 27 insertions(+)
 create mode 100644 lass/2configs/gsm-wiki.nix

diff --git a/lass/1systems/neoprism/config.nix b/lass/1systems/neoprism/config.nix
index cc08070a..7b402f8a 100644
--- a/lass/1systems/neoprism/config.nix
+++ b/lass/1systems/neoprism/config.nix
@@ -4,6 +4,7 @@
   imports = [
     <stockholm/lass>
     <stockholm/lass/2configs/retiolum.nix>
+    <stockholm/lass/2configs/gsm-wiki.nix>
 
     # sync-containers
     <stockholm/lass/2configs/consul.nix>
diff --git a/lass/2configs/gsm-wiki.nix b/lass/2configs/gsm-wiki.nix
new file mode 100644
index 00000000..69508a15
--- /dev/null
+++ b/lass/2configs/gsm-wiki.nix
@@ -0,0 +1,26 @@
+{ config, lib, pkgs, ... }:
+{
+  services.nginx.virtualHosts."docs.c3gsm.de" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/".extraConfig = ''
+      auth_basic "Restricted Content";
+      auth_basic_user_file ${pkgs.writeText "flix-user-pass" ''
+        c3gsm:$apr1$q9OrPI4C$7AY4EIp3J2Xc4eLMbPGE21
+      ''};
+      root /srv/http/docs.c3gsm.de;
+    '';
+  };
+
+  users.users.c3gsm-docs = {
+    isNormalUser = true;
+    home = "/srv/http/docs.c3gsm.de";
+    createHome = true;
+    homeMode = "750";
+    useDefaultShell = true;
+    group = "nginx";
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlW1fvCrVXhVH/z76fXBWYR/qyecYTE9VOOkFLJ6OwG user@osmocom-dev"
+    ];
+  };
+}
-- 
cgit v1.2.3