From ebd0fce27fa56a46d9f7f079c6663c119e1fb271 Mon Sep 17 00:00:00 2001
From: Lucas Sta Maria <lucas@priime.dev>
Date: Tue, 12 Aug 2025 14:04:08 +0000
Subject: [PATCH] fix(nix): add acme and nginx simple configuration

---
 nix/hosts/chaewon/sys.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/nix/hosts/chaewon/sys.nix b/nix/hosts/chaewon/sys.nix
index ae93434..a4f1585 100644
--- a/nix/hosts/chaewon/sys.nix
+++ b/nix/hosts/chaewon/sys.nix
@@ -51,6 +51,13 @@
     ATTR{address}=="92:00:06:59:7a:8b", NAME="eth0"
   '';
 
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "lucas@priime.dev";
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
   i18n.extraLocaleSettings = {
@@ -76,6 +83,17 @@
 
   programs.fish.enable = true;
 
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "files.priime.dev" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = { root = "/var/lib/files.priime.dev"; };
+      };
+    };
+  };
+
   system.stateVersion = "23.11";
   home-manager.users.priime = { pkgs, ... }: { imports = [ ./home.nix ]; };
 }