1 files changed, 42 insertions, 0 deletions
diff --git a/sys/web/sites/portal.nix b/sys/web/sites/portal.nix
new file mode 100644
index 0000000..c4d948e
--- /dev/null
+++ b/sys/web/sites/portal.nix
@@ -0,0 +1,42 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.local.web.sites.portal;
+  inherit (config.local) domains;
+in {
+  options.local.web.sites.portal = {
+    enable = mkEnableOption "public non-fqdn portal";
+  };
+
+  config = mkIf cfg.enable {
+    local.web = {
+      enable = mkDefault true;
+      ownedCerts = ["host" "sysret"];
+      defaultACMEHost = domains.host.main;
+    };
+
+    services.nginx.virtualHosts = {
+      ${domains.host.www} = {
+        forceSSL = true;
+        useACMEHost = domains.host.main;
+        serverAliases = [domains.host.main];
+      };
+
+      ${domains.sysret.main} = {
+        forceSSL = true;
+        useACMEHost = domains.sysret.main;
+        serverAliases = [domains.sysret.www];
+
+        locations = {
+          "/".alias = "${pkgs.local.sysret-static}/";
+          "/fsociety".return = "301 https://meet.posixlycorrect.com/%C6%92%C6%A8%C5%8F%C4%8B%D3%80%C9%99%CF%AE%D0%A3";
+          "/.well-known/openpgpkey/hu/".alias = "/var/lib/pgp-wkd/";
+        };
+      };
+    };
+  };
+}