1 files changed, 28 insertions, 1 deletions
diff --git a/machines/nixos/x86_64-linux/do-rproxy/profiles/nginx.nix b/machines/nixos/x86_64-linux/do-rproxy/profiles/nginx.nix
index fc273b7..5a16c95 100644
--- a/machines/nixos/x86_64-linux/do-rproxy/profiles/nginx.nix
+++ b/machines/nixos/x86_64-linux/do-rproxy/profiles/nginx.nix
@@ -1,4 +1,8 @@
-{ config, ... }:
+{
+  inputs,
+  config,
+  ...
+}:
 {
   networking.firewall.allowedTCPPorts = [
     80
@@ -27,6 +31,12 @@
         reloadServices = [ "nginx.service" ];
         credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-nginx".path;
       };
+      "fcuny.net" = {
+        dnsProvider = "cloudflare";
+        dnsResolver = "1.1.1.1";
+        reloadServices = [ "nginx.service" ];
+        credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-nginx".path;
+      };
     };
   };
 
@@ -68,6 +78,23 @@
           proxyPass = "http://10.100.0.40:8080";
         };
       };
+      "fcuny.net" = {
+        enableACME = true;
+        acmeRoot = null;
+        forceSSL = true;
+
+        root = "${inputs.my-site.packages.x86_64-linux.default}/";
+
+        locations = {
+          "/".tryFiles = "$uri $uri/ $uri/index.html =404";
+          "/resume".return = "301 https://fcuny.net/resume.pdf";
+          "/resume/".return = "301 https://fcuny.net/resume.pdf";
+        };
+
+        extraConfig = ''
+          error_page 404 /404;
+        '';
+      };
     };
   };
 }