From 13486879b764092d0004464510615ffa1f8152a2 Mon Sep 17 00:00:00 2001
From: lassulus <lass@aidsballs.de>
Date: Thu, 7 Jul 2016 23:07:22 +0200
Subject: l 1 prism: fix ssl for cgit.lassul.us

---
 lass/1systems/prism.nix | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

(limited to 'lass/1systems/prism.nix')

diff --git a/lass/1systems/prism.nix b/lass/1systems/prism.nix
index 5477a8b8..1eb81cd0 100644
--- a/lass/1systems/prism.nix
+++ b/lass/1systems/prism.nix
@@ -1,5 +1,7 @@
 { config, lib, pkgs, ... }:
 
+with config.krebs.lib;
+
 let
   ip = config.krebs.build.host.nets.internet.ip4.addr;
 
@@ -24,11 +26,22 @@ in {
     {
       imports = [
         ../2configs/git.nix
-        ( manageCerts [ "cgit.lassul.us" ])
-      ];
-      krebs.nginx.servers.cgit.server-names = [
-        "cgit.lassul.us"
       ];
+      krebs.nginx.servers.cgit = {
+        server-names = [
+          "cgit.lassul.us"
+        ];
+        locations = [
+          (nameValuePair "/.well-known/acme-challenge" ''
+            root /var/lib/acme/challenges/cgit.lassul.us/;
+          '')
+        ];
+        ssl = {
+          enable = true;
+          certificate = "/var/lib/acme/cgit.lassul.us/fullchain.pem";
+          certificate_key = "/var/lib/acme/cgit.lassul.us/key.pem";
+        };
+      };
     }
     {
       users.extraGroups = {
-- 
cgit v1.2.3


From b689da8fb0ee097e2aadb099d967a4fa1d8fad60 Mon Sep 17 00:00:00 2001
From: lassulus <lass@aidsballs.de>
Date: Fri, 8 Jul 2016 09:43:49 +0200
Subject: l 1 prism: remove obsolete certfile option

---
 lass/1systems/prism.nix | 1 -
 1 file changed, 1 deletion(-)

(limited to 'lass/1systems/prism.nix')

diff --git a/lass/1systems/prism.nix b/lass/1systems/prism.nix
index 1eb81cd0..ed8c2995 100644
--- a/lass/1systems/prism.nix
+++ b/lass/1systems/prism.nix
@@ -202,7 +202,6 @@ in {
       lass.ejabberd = {
         enable = true;
         hosts = [ "lassul.us" ];
-        certfile = "/var/lib/acme/lassul.us/full.pem";
       };
       krebs.iptables.tables.filter.INPUT.rules = [
         { predicate = "-p tcp --dport xmpp-client"; target = "ACCEPT"; }
-- 
cgit v1.2.3


From 14cbd11e0e5a18eaf85b5f984ec4ed3a39da494b Mon Sep 17 00:00:00 2001
From: lassulus <lass@aidsballs.de>
Date: Fri, 8 Jul 2016 13:42:12 +0200
Subject: l 1 prism: add mk_sql_pair

---
 lass/1systems/prism.nix | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'lass/1systems/prism.nix')

diff --git a/lass/1systems/prism.nix b/lass/1systems/prism.nix
index ed8c2995..270bb6fc 100644
--- a/lass/1systems/prism.nix
+++ b/lass/1systems/prism.nix
@@ -218,6 +218,11 @@ in {
         '')
       ];
     }
+    {
+      environment.systemPackages = with pkgs; [
+        mk_sql_pair
+      ];
+    }
   ];
 
   krebs.build.host = config.krebs.hosts.prism;
-- 
cgit v1.2.3