moved gabevenberg.com to cirrus.

hosts/cirrus/default.nix

@@ -12,6 +12,7 @@ inputs.nixpkgs.lib.nixosSystem {
     inputs.home-manager.nixosModules.home-manager
     inputs.disko.nixosModules.disko
     ./disk-config.nix
+    ./nginx.nix
     ./restic.nix
     ../../roles/nixos/vm.nix
     ../../configs/nixos/common.nix
@@ -53,6 +54,11 @@ inputs.nixpkgs.lib.nixosSystem {
             format = "binary";
             owner = "radicale";
           };
+          gabevenberg-draft-credentials = {
+            sopsFile = "${inputs.nix-secrets}/draft.gabevenberg.com";
+            format = "binary";
+            owner = config.services.nginx.user;
+          };
         };
       };
       home-manager.users.${config.host.user} = {

hosts/cirrus/nginx.nix

@@ -0,0 +1,25 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  imports = [
+    ../../configs/nixos/nginx.nix
+  ];
+  services.nginx.clientMaxBodySize = "100m";
+  services.nginx.virtualHosts = {
+    "gabevenberg.com" = {
+      enableACME = true;
+      forceSSL = true;
+      root = "/var/www/gabevenberg.com";
+    };
+    "draft.gabevenberg.com" = {
+      enableACME = true;
+      forceSSL = true;
+      root = "/var/www/draft.gabevenberg.com";
+      basicAuthFile = config.sops.secrets.gabevenberg-draft-credentials.path;
+    };
+  };
+}