1 files changed, 44 insertions, 24 deletions

diff --git a/Omni/Cloud/Web.nix b/Omni/Cloud/Web.nix
index 1791539..84f87d4 100644
--- a/Omni/Cloud/Web.nix
+++ b/Omni/Cloud/Web.nix
@@ -17,6 +17,8 @@ in {
     ];
   };
 
+  users.users.nginx.extraGroups = ["acme"];
+
   services = {
     libreddit = {
       enable = true;
@@ -115,7 +117,6 @@ in {
                 names.bensima = "2fa4b9ba71b6dab17c4723745bb7850dfdafcb6ae1a8642f76f9c64fa5f43436";
               }
             }'";
-            # disabled for nixpert test
             "/" = {
               root = "/var/web/simatime.com";
               extraConfig = ''
@@ -133,6 +134,24 @@ in {
           };
         };
 
+        # these are for xmpp, not sure if they are necessary but they seem to be?
+        "conference.${rootDomain}" = {
+          forceSSL = true;
+          useACMEHost = rootDomain;
+          locations."/" = {
+            root = "/var/web/simatime.com";
+            extraConfig = "autoindex on;";
+          };
+        };
+        "upload.${rootDomain}" = {
+          forceSSL = true;
+          useACMEHost = rootDomain;
+          locations."/" = {
+            root = "/var/web/simatime.com";
+            extraConfig = "autoindex on;";
+          };
+        };
+
         "bsima.me" = {
           locations."/" = {
             root = "/var/web/ben";
@@ -265,27 +284,28 @@ in {
     };
   };
 
-  # This must contain all of the other domains we host
-  security.acme.certs.${rootDomain}.extraDomainNames =
-    ["bsima.me" "www.bsima.me"]
-    ++ map (sub: "${sub}.${rootDomain}") [
-      "music"
-      "tv"
-      "matrix"
-      "chat"
-      "hoogle"
-      "dandel-rovbur"
-      "sabten"
-      "cal"
-      "notebook"
-      "nostr"
-      "reddit"
-      "old.reddit"
-      "www.reddit"
-      "youtube"
-      "www.youtube"
-      "m.youtube"
-      "sd"
-      "gerrit"
-    ];
+  security.acme.certs.${rootDomain} = {
+    group = "nginx";
+    # This must contain all of the other domains we host
+    extraDomainNames =
+      ["bsima.me" "www.bsima.me"]
+      ++ map (sub: "${sub}.${rootDomain}") [
+        "music"
+        "tv"
+        "hoogle"
+        "dandel-rovbur"
+        "sabten"
+        "cal"
+        "notebook"
+        "nostr"
+        "youtube"
+        "www.youtube"
+        "m.youtube"
+        "sd"
+        "gerrit"
+        # xmpp stuff
+        "upload"
+        "conference"
+      ];
+  };
 }