this repo has no description
feat: serve atproto-did for arpa domain
+12
-5
+12
-5
hosts/wolumonde/modules/atproto.nix
+12
-5
hosts/wolumonde/modules/atproto.nix
···
5
5
${lib.concatStringsSep "\n" (lib.mapAttrsToList mkFileCopy files)}
6
6
'';
7
7
mkWellKnownCfg = files: {
8
-
useACMEHost = "gaze.systems";
9
-
forceSSL = true;
10
8
locations."/.well-known/".extraConfig = ''
11
9
add_header content-type text/plain;
12
10
add_header access-control-allow-origin *;
···
14
12
'';
15
13
};
16
14
mkDidWebCfg = domain: {
17
-
"${domain}" = mkWellKnownCfg {
15
+
"${domain}" = (mkWellKnownCfg {
18
16
"did.json" = ../../../secrets/${domain}.did;
19
17
"atproto-did" = pkgs.writeText "server" "did:web:${domain}";
20
-
};
18
+
}) // (lib.optionalAttrs (lib.hasSuffix "gaze.systems" domain) {
19
+
useACMEHost = "gaze.systems";
20
+
forceSSL = true;
21
+
});
21
22
};
22
23
in {
23
24
services.nginx.virtualHosts = {
24
-
"gaze.systems" = mkWellKnownCfg {
25
+
"gaze.systems" = (mkWellKnownCfg {
25
26
"atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";
27
+
}) // {
28
+
useACMEHost = "gaze.systems";
29
+
forceSSL = true;
30
+
};
31
+
"9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {
32
+
"atproto-did" = pkgs.writeText "server" "did:plc:flbbrsgh46heoumgbemhfkvm";
26
33
};
27
34
} // (mkDidWebCfg "dawn.gaze.systems")
28
35
// (mkDidWebCfg "guestbook.gaze.systems");