initial commit

hosts/rx4/services/nginx.nix

@@ -0,0 +1,37 @@
+{
+  inputs,
+  constants,
+  config,
+  ...
+}:
+
+let
+  cfg = config.services.nginx;
+in
+{
+  imports = [
+    inputs.synix.nixosModules.nginx
+  ];
+
+  systemd.tmpfiles.rules = [
+    "d /var/www 0755 gitea-runner ${cfg.group} -"
+  ];
+
+  systemd.services.gitea-runner-default.serviceConfig = {
+    ReadWritePaths = [ "/var/www" ];
+  };
+
+  services.nginx = {
+    enable = true;
+    openFirewall = false;
+    forceSSL = false;
+
+    virtualHosts = {
+      "${constants.services.docs.fqdn}" = {
+        locations."/" = {
+          root = "/var/www/doc";
+        };
+      };
+    };
+  };
+}