From ab06eab6af32e794882687a25746a35a66ef481d Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Thu, 26 Jan 2023 16:15:35 +0100
Subject: l ubik.r: init on neoprism.r

---
 lass/1systems/neoprism/config.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'lass/1systems/neoprism/config.nix')

diff --git a/lass/1systems/neoprism/config.nix b/lass/1systems/neoprism/config.nix
index 8e5a60c3..dc2702e6 100644
--- a/lass/1systems/neoprism/config.nix
+++ b/lass/1systems/neoprism/config.nix
@@ -9,6 +9,7 @@
     <stockholm/lass/2configs/consul.nix>
     <stockholm/lass/2configs/yellow-host.nix>
     <stockholm/lass/2configs/radio/container-host.nix>
+    <stockholm/lass/2configs/ubik-host.nix>
 
     # other containers
     <stockholm/lass/2configs/riot.nix>
-- 
cgit v1.2.3


From 30599f5f60c87969180ce49a702a47b272ff1c20 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Thu, 26 Jan 2023 16:15:49 +0100
Subject: l neoprism.r: add nginx with acme

---
 lass/1systems/neoprism/config.nix | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'lass/1systems/neoprism/config.nix')

diff --git a/lass/1systems/neoprism/config.nix b/lass/1systems/neoprism/config.nix
index dc2702e6..7f6be782 100644
--- a/lass/1systems/neoprism/config.nix
+++ b/lass/1systems/neoprism/config.nix
@@ -16,4 +16,9 @@
   ];
 
   krebs.build.host = config.krebs.hosts.neoprism;
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  services.nginx.enable = true;
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "acme@lassul.us";
 }
-- 
cgit v1.2.3