bryan/nixos
0
0
Fork 0
mirror of https://github.com/itme-brain/nixos.git synced 2026-03-24 00:29:43 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

updates to server modules

Browse source
This commit is contained in:
Bryan Ramos 2025-07-05 19:57:46 -04:00
parent de564231e7
commit 9cb8467224
Signed by: bryan
GPG key ID: 6ABDCD144D6643C8
2 changed files with 17 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/system/modules/nginx/default.nix
View file

@ -10,26 +10,26 @@ in
config = mkIf cfg.enable {
users = {
users = {
"nginx" = {
"${config.services.nginx.user}" = {
description = "Web server system user";
isSystemUser = true;
group = mkForce "web";
group = mkForce "${config.services.nginx.group}";
};
"btc" = {
extraGroups = mkIf module.bitcoin.enable [
"web"
"${config.services.nginx.group}"
];
};
"git" = {
"${config.services.forgejo.user}" = {
extraGroups = mkIf module.forgejo.enable [
"web"
"${config.services.nginx.group}"
];
};
};
groups = {
"web" = {
"${config.services.nginx.group}" = {
members = [
"nginx"
"${config.services.nginx.user}"
];
};
};
@ -56,6 +56,9 @@ in
services.nginx = {
enable = true;
user = "nginx";
group = "web";
virtualHosts =
let
certPath = config.security.acme.certs."ramos.codes".directory;
@ -66,7 +69,6 @@ in
inherit sslCertificate sslCertificateKey;
forceSSL = true;
}) hosts;
in withSSL
{
"git.ramos.codes" = mkIf module.forgejo.enable {