nginx: add nginx as a reverse proxy

This will ultimately replace traefik.

1 files changed, 14 insertions, 1 deletions

diff --git a/hosts/tahoe/services.nix b/hosts/tahoe/services.nix
index 75a6ee2..8846eae 100644
--- a/hosts/tahoe/services.nix
+++ b/hosts/tahoe/services.nix
@@ -18,7 +18,20 @@ in {
       stateDir = "/var/lib/gitea";
     };
     rclone = { enable = true; };
-    traefik = { enable = true; };
+    traefik = { enable = false; };
+    nginx = {
+      enable = true;
+      acme = { credentialsFile = secrets."acme/dns-key".path; };
+      sso = {
+        authKeyFile = secrets."sso/auth-key".path;
+        users = {
+          fcuny = {
+            passwordHashFile = secrets."sso/fcuny/password-hash".path;
+          };
+        };
+        groups = { root = [ "fcuny" ]; };
+      };
+    };
     transmission = { enable = true; };
     metrics-exporter = { enable = true; };
     backup = {