chore(nginx): move mkVHost to lib

home/terminal/ssh/default.nix

@@ -18,7 +18,7 @@ mkIf config.programs.ssh.enable {
       };
       raptus = {
         hostname = "vps.ccnlc.eu";
-        user = "root";
+        user = "ny";
         port = 56528;
       };
       #shan = {

hosts/raptus/configuration.nix

@@ -6,6 +6,9 @@
   pubkeys,
   ...
 }:
+let
+  inherit (lib.my) mkVHost;
+in
 {
   imports = [
     (modulesPath + "/profiles/qemu-guest.nix")
@@ -15,8 +18,7 @@
     ./forgejo
     ./obsidian-livesync
     ./headscale.nix
-    ../../modules/nix
+    ../../modules
-    ../../modules/users/ny.nix
   ];
 
   age.secrets = {
@@ -50,25 +52,9 @@
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
     clientMaxBodySize = "50M";
-    virtualHosts =
+    virtualHosts = builtins.listToAttrs [
-      let
+      (mkVHost "rusty.ccnlc.eu" 8000 true)
-        mkVHost = name: port: {
+      (mkVHost "git.ccnlc.eu" 3000 true)
-          inherit name;
-          value = {
-            enableACME = true;
-            forceSSL = true;
-            locations."/" = {
-              proxyPass = "http://127.0.0.1:${toString port}";
-              extraConfig = ''
-                proxy_ssl_server_name on;
-                proxy_pass_header Authorization;'';
-            };
-          };
-        };
-      in
-      builtins.listToAttrs [
-        (mkVHost "rusty.ccnlc.eu" 8000)
-        (mkVHost "git.ccnlc.eu" 3000)
     ];
   };
 
@@ -87,7 +73,10 @@
     pkgs.gitMinimal
   ];
 
-  users.users.root.openssh.authorizedKeys.keys = [ pubkeys.ny ];
+  users.users = {
+    root.openssh.authorizedKeys.keys = [ pubkeys.ny ];
+    ny.openssh.authorizedKeys.keys = [ pubkeys.ny ];
+  };
 
   system.stateVersion = "24.11";
 }

parts/lib/functions.nix

@@ -4,6 +4,9 @@
   self,
   ...
 }:
+let
+  inherit (lib) mkIf;
+in
 {
 
   # Verify the existence of a binary inside of a derivation.
@@ -43,4 +46,18 @@
 
   validatePath =
     s: if (builtins.pathExists s) then (builtins.baseNameOf s) else throw "${s} does not exist";
+
+  mkVHost = name: port: ssl: {
+    inherit name;
+    value = {
+      enableACME = ssl;
+      forceSSL = ssl;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString port}";
+        extraConfig = ''
+          proxy_ssl_server_name on;
+          proxy_pass_header Authorization;'';
+      };
+    };
+  };
 }