From 6ee4f8c1c1847c901f76caf7548383c9af339a92 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Sat, 8 Jul 2023 17:03:10 +0200
Subject: l neoprism.r: add more services

---
 lass/1systems/neoprism/config.nix | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

(limited to 'lass/1systems')

diff --git a/lass/1systems/neoprism/config.nix b/lass/1systems/neoprism/config.nix
index 7b402f8a..79402959 100644
--- a/lass/1systems/neoprism/config.nix
+++ b/lass/1systems/neoprism/config.nix
@@ -4,6 +4,9 @@
   imports = [
     <stockholm/lass>
     <stockholm/lass/2configs/retiolum.nix>
+    <stockholm/lass/2configs/mail/internet-gateway.nix>
+    <stockholm/lass/2configs/binary-cache/server.nix>
+    <stockholm/lass/2configs/matrix.nix>
     <stockholm/lass/2configs/gsm-wiki.nix>
 
     # sync-containers
@@ -26,7 +29,23 @@
   krebs.build.host = config.krebs.hosts.neoprism;
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];
-  services.nginx.enable = true;
   security.acme.acceptTerms = true;
   security.acme.defaults.email = "acme@lassul.us";
+  services.nginx = {
+    enable = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedTlsSettings = true;
+
+    enableReload = true;
+
+    virtualHosts.default = {
+      default = true;
+      locations."= /etc/os-release".extraConfig = ''
+        default_type text/plain;
+        alias /etc/os-release;
+      '';
+      locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
+    };
+  };
 }
-- 
cgit v1.2.3