fix(nix): configure nginx/acme for multiple domains

This commit is contained in:
Lucas Sta Maria 2025-08-13 09:08:07 +00:00
parent 9e23d00da5
commit fb1b551123
No known key found for this signature in database
GPG key ID: F07FB16A826E3B47

View file

@ -58,6 +58,19 @@
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults.email = "lucas@priime.dev"; defaults.email = "lucas@priime.dev";
certs = {
"priime.dev" = {
webroot = "/var/lib/acme/priime.dev";
email = "lucas@priime.dev";
group = "nginx";
extraDomainNames = [ "www.priime.dev" ];
};
"files.priime.dev" = {
webroot = "/var/lib/acme/files.priime.dev";
email = "lucas@priime.dev";
group = "nginx";
};
};
}; };
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];
@ -92,14 +105,22 @@
services.nginx = { services.nginx = {
enable = true; enable = true;
virtualHosts = { virtualHosts = {
"_" = { locations."/".return = "301 https://priime.dev"; };
"priime.dev" = { "priime.dev" = {
forceSSL = true; forceSSL = true;
enableACME = true; useACMEHost = "priime.dev";
locations."/".root = "/home/priime/site/build"; serverAliases = [ "www.priime.dev" ];
acmeRoot = "/var/lib/acme/priime.dev";
locations."/" = {
root = "/var/www/site";
index = "index.html";
tryFiles = "$uri $uri.html $uri/ /404.html";
};
}; };
"files.priime.dev" = { "files.priime.dev" = {
forceSSL = true; forceSSL = true;
enableACME = true; useACMEHost = "files.priime.dev";
acmeRoot = "/var/lib/acme/files.priime.dev";
locations."/" = { locations."/" = {
root = "/var/lib/files.priime.dev"; root = "/var/lib/files.priime.dev";
extraConfig = '' extraConfig = ''