summaryrefslogtreecommitdiff
path: root/modules/notifications.linus.onl/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/notifications.linus.onl/default.nix')
-rw-r--r--modules/notifications.linus.onl/default.nix42
1 files changed, 42 insertions, 0 deletions
diff --git a/modules/notifications.linus.onl/default.nix b/modules/notifications.linus.onl/default.nix
new file mode 100644
index 0000000..443853f
--- /dev/null
+++ b/modules/notifications.linus.onl/default.nix
@@ -0,0 +1,42 @@
+{ pkgs, lib, config, ... }:
+
+let
+ inherit (lib) mkEnableOption mkOption types mkIf optional;
+
+ domain = "notifications.linus.onl";
+
+ # TODO: Make option internal-port.
+ internal-port = 13082;
+
+ cfg = config.my.modules."notifications.linus.onl";
+in
+{
+ options.my.modules."notifications.linus.onl" = {
+ enable = mkEnableOption "notifications.linus.onl static site";
+
+ useACME = mkEnableOption "built-in HTTPS stuff";
+ };
+
+ config = mkIf cfg.enable {
+ my.services.push-notification-api = {
+ enable = true;
+ # host = "notifications.linus.onl";
+ host = "0.0.0.0";
+ port = internal-port;
+ openFirewall = false; # We're using NGINX reverse proxy.
+ };
+
+ # Register domain name.
+ services.cloudflare-dyndns.domains = [ "notifications.linus.onl" ];
+
+ # Serve the generated page using NGINX.
+ services.nginx.virtualHosts."notifications.linus.onl" = {
+ enableACME = cfg.useACME;
+ forceSSL = cfg.useACME;
+ locations."/" = {
+ recommendedProxySettings = true;
+ proxyPass = "http://127.0.0.1:${toString internal-port}";
+ };
+ };
+ };
+}