From 33639143ea50404a04bc4c454435aff1bd79dd4b Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Fri, 20 Dec 2024 13:58:21 +0100
Subject: refactor({modules,test}): Migrate to a `by-name` structure

---
 modules/nixos/vhack/nginx/default.nix   | 68 ---------------------------------
 modules/nixos/vhack/nginx/redirects.nix |  6 ---
 2 files changed, 74 deletions(-)
 delete mode 100644 modules/nixos/vhack/nginx/default.nix
 delete mode 100644 modules/nixos/vhack/nginx/redirects.nix

(limited to 'modules/nixos/vhack/nginx')

diff --git a/modules/nixos/vhack/nginx/default.nix b/modules/nixos/vhack/nginx/default.nix
deleted file mode 100644
index 6a82147..0000000
--- a/modules/nixos/vhack/nginx/default.nix
+++ /dev/null
@@ -1,68 +0,0 @@
-{
-  lib,
-  config,
-  ...
-}: let
-  importedRedirects = import ./redirects.nix {};
-  mkRedirect = {
-    key,
-    value,
-  }: {
-    name = key;
-    value = {
-      forceSSL = true;
-      enableACME = true;
-      locations."/".return = "301 ${value}";
-    };
-  };
-
-  redirects = builtins.listToAttrs (builtins.map mkRedirect importedRedirects);
-
-  cfg = config.vhack.nginx;
-in {
-  options.vhack.nginx = {
-    enable = lib.mkEnableOption ''
-      a default nginx config.
-    '';
-
-    selfsign = lib.mkOption {
-      type = lib.types.bool;
-      default = false;
-      description = ''
-        Whether to selfsign the acme certificates. This should only
-        really be useful for tests.
-      '';
-    };
-  };
-
-  config = lib.mkIf cfg.enable {
-    security.acme = {
-      acceptTerms = true;
-      defaults = {
-        email = "admin@vhack.eu";
-        webroot = "/var/lib/acme/acme-challenge";
-
-        # Avoid spamming the acme server, if we run in a test, and only really want self-signed
-        # certificates
-        server = lib.mkIf cfg.selfsign "https://127.0.0.1";
-      };
-    };
-
-    networking.firewall = {
-      allowedTCPPorts = [80 443];
-    };
-    services.nginx = {
-      enable = true;
-      # The merge here is fine, as no domain should be specified twice
-      virtualHosts =
-        {
-          "gallery.s-schoeffel.de" = {
-            forceSSL = true;
-            enableACME = true;
-            root = "/srv/gallery.s-schoeffel.de";
-          };
-        }
-        // redirects;
-    };
-  };
-}
diff --git a/modules/nixos/vhack/nginx/redirects.nix b/modules/nixos/vhack/nginx/redirects.nix
deleted file mode 100644
index a021e72..0000000
--- a/modules/nixos/vhack/nginx/redirects.nix
+++ /dev/null
@@ -1,6 +0,0 @@
-{...}: [
-  {
-    key = "source.vhack.eu";
-    value = "https://codeberg.org/vhack.eu/nixos-server";
-  }
-]
-- 
cgit 1.4.1