initial commit

2026-02-23 20:34:35 +01:00 · 2026-02-23 20:34:35 +01:00 · 95a533c876
commit 95a533c876
451 changed files with 18255 additions and 0 deletions
--- a/modules/nixos/webPage/default.nix
+++ b/modules/nixos/webPage/default.nix
@ -0,0 +1,66 @@
+{ config, lib, ... }:
+
+let
+  cfg = config.services.webPage;
+  domain = config.networking.domain;
+  fqdn = if (cfg.subdomain != "") then "${cfg.subdomain}.${domain}" else domain;
+  nginxUser = config.services.nginx.user;
+
+  inherit (lib)
+    mkEnableOption
+    mkIf
+    mkOption
+    types
+    ;
+in
+{
+  options.services.webPage = {
+    enable = mkEnableOption "static web page hosting";
+    subdomain = mkOption {
+      type = types.str;
+      default = "www";
+      description = "The subdomain to serve the web page on. Leave empty for root domain.";
+    };
+    forceSSL = mkOption {
+      type = types.bool;
+      default = true;
+      description = "Force SSL for Nginx virtual host.";
+    };
+    webRoot = mkOption {
+      type = types.str;
+      description = "The root directory of the web page.";
+      example = "/var/www";
+    };
+    test = mkOption {
+      type = types.bool;
+      default = false;
+      description = "If true, a sample index.html will be placed in the web root for testing purposes.";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    services.nginx.virtualHosts."${fqdn}" = {
+      enableACME = cfg.forceSSL;
+      forceSSL = cfg.forceSSL;
+      root = cfg.webRoot;
+      locations."/".index = "index.html";
+      sslCertificate = mkIf cfg.forceSSL "${config.security.acme.certs."${fqdn}".directory}/cert.pem";
+      sslCertificateKey = mkIf cfg.forceSSL "${config.security.acme.certs."${fqdn}".directory}/key.pem";
+    };
+
+    systemd.tmpfiles.rules = [ "d ${cfg.webRoot} 0755 ${nginxUser} ${nginxUser} -" ];
+
+    system.activationScripts.webPagePermissions = ''
+      chown -R ${nginxUser}:${nginxUser} ${cfg.webRoot}
+      chmod -R 0755 ${cfg.webRoot}
+    '';
+
+    # test page
+    environment.etc."sample.html" = mkIf cfg.test { source = ./sample.html; };
+    system.activationScripts.moveSampleHtmlToWebRoot = mkIf cfg.test ''
+      mv /etc/sample.html ${cfg.webRoot}/index.html
+      chown -R ${nginxUser}:${nginxUser} ${cfg.webRoot}
+      chmod -R 0755 ${cfg.webRoot}
+    '';
+  };
+}
--- a/modules/nixos/webPage/sample.html
+++ b/modules/nixos/webPage/sample.html
@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Test Page</title>
+</head>
+<body>
+    <h1>Test Page</h1>
+    <p>This is a sample index.html file for testing purposes.</p>
+</body>
+</html>