dotfiles/nixos/boxes/mb1/blog.nix

{
  config,
  pkgs,
  ...
}: let
  path = "/var/www/blog/";
in {
  imports = [../nginx.nix];
  services.nginx = {
    virtualHosts = {
      "blog.cyplo.dev" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          root = path;
        };
      };
      "blog.cyplo.net" = {
        forceSSL = true;
        enableACME = true;
        globalRedirect = "blog.cyplo.dev";
      };
    };
  };

  users.extraUsers.blog = {
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILqDeXcIQwLXxuueu9KTC6y6NPUUzDRdF4Q5NUk+nFwt upload@blog"
    ];
    group = "nginx";
    isSystemUser = false;
    isNormalUser = true;
    home = path;
    createHome = true;
    homeMode = "750";
  };
}