From bcc797fa2f820b2de9adad46e7e90bbf8f96460e Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Fri, 14 Feb 2020 11:49:04 +0000
Subject: feat(camden): Move to actual tazj.in hostnames

---
 ops/nixos/camden/default.nix | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

(limited to 'ops')

diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index 8176df5c64..ad59bc0787 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -155,6 +155,17 @@ in pkgs.lib.fix(self: {
     postRun = "systemctl reload nginx";
   };
 
+  security.acme.certs."tazj.in" = {
+    user = "nginx";
+    group = "nginx";
+    webroot = "/var/lib/acme/acme-challenge";
+    extraDomains = {
+      "git.tazj.in" = null;
+      "www.tazj.in" = null;
+    };
+    postRun = "systemctl reload nginx";
+  };
+
   # serve my website
   services.nginx = {
     enable = true;
@@ -182,9 +193,9 @@ in pkgs.lib.fix(self: {
     '';
 
     virtualHosts.homepage = {
-      serverName = "camden.tazj.in"; # TODO(tazjin): change to actual host later
+      serverName = "tazj.in"; # TODO(tazjin): change to actual host later
       default = true;
-      useACMEHost = "camden.tazj.in";
+      useACMEHost = "tazj.in";
       root = pkgs.web.homepage;
       addSSL = true;
 
@@ -212,8 +223,8 @@ in pkgs.lib.fix(self: {
     };
 
     virtualHosts.cgit = {
-      serverName = "git.camden.tazj.in";
-      useACMEHost = "camden.tazj.in";
+      serverName = "git.tazj.in";
+      useACMEHost = "tazj.in";
       addSSL = true;
 
       extraConfig = ''
-- 
cgit 1.4.1