auth and git

fili/services/websites/mapf.nix

@@ -0,0 +1,29 @@
+{flakes,...}: {
+  # imports = [
+  #   flakes.mapf.nixosModules.default
+  # ];
+
+  sops.secrets.mapf = {
+    sopsFile = ../../../secrets/mapf-prod.env;
+  };
+
+  services.nginx = {
+    virtualHosts."mapf.donsz.nl" = {
+      forceSSL = true;
+      http2 = true;
+      enableACME = true;
+
+      locations."/" = {
+        proxyPass = "http://[::1]:8080";
+      };
+    };
+  };
+
+  # donsz.services.mapf = {
+  #   enable = true;
+  #   envfile = "/run/secrets/sops/mapf";
+  #   db_name = "mapfprod";
+  #   db_user = "mapfprod";
+  #   db_password = "";
+  # };
+}