hosts/storage-2: add firmware.clerie.de

hosts/storage-2/configuration.nix

@@ -5,8 +5,10 @@
     [
       ./hardware-configuration.nix
       ../../configuration/proxmox-vm
+      ./firmware.nix
       ./mixcloud.nix
       ./syncthing.nix
+      ./users.nix
     ];
 
   boot.loader.grub.enable = true;

hosts/storage-2/firmware.nix

@@ -0,0 +1,37 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+{
+  age.secrets.firmware-htpasswd = {
+    owner = "nginx";
+    group = "nginx";
+  };
+
+  services.nginx.virtualHosts = {
+    "firmware.clerie.de" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        alias = "/data/firmware/";
+        basicAuthFile = config.age.secrets.firmware-htpasswd.path;
+        extraConfig = ''
+          autoindex on;
+          autoindex_exact_size off;
+        '';
+      };
+    };
+  };
+
+  users.users.data-firmware = {
+    group = "data-firmware";
+    home = "/data/firmware";
+    useDefaultShell = true;
+    isSystemUser = true;
+  };
+  users.groups.data-firmware = {};
+
+  systemd.tmpfiles.rules = [
+    "d /data/firmware - data-firmware data-firmware - -"
+  ];
+}

hosts/storage-2/secrets/firmware-htpasswd.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 HwR33w AtsznTAUQumy3G6fSBwIiezL2Zdzl33t9TU3hDotcRs
+eG+bBDB+MOQk7cHx+3Ha/n83t2QEbZunRYi0idRF9RQ
+-> ssh-ed25519 pI7EWw egjmvw3f6zrl0XmxI7xWhKsPl8PXTkZDSY84VbtJTG4
+MFsjDhp5UrprE3w7q9W3ZmGlkNnOFbsJNVjfeO11trw
+-> 0=-grease Fi`a + >zPFov* a
+nx2zvPHhzkSNi/8oxnL07qefB248BCwJMjpVTc8i5j5aedELas87iI/WppKoa/tq
+/jYLHztLjqKy412YvA0xuzR6yZ7G
+--- 7M+CSupk4WV36DU/c8ZtODB6N8kuhttk4aLMULp8/Zc
+†!U©ÊÀÍÕ©ÁÒ±m<C2B1>îL¦ˆsøaYh?<3F>Uaq®a¤}¯¦ ˜ÂŽ•Ÿ¾ô®Ål@Eqǘ˜Óà¦w¯ä<C2AF>¯¾þÈ*.¼ýL¯Ñ“JeFy@=	J™õ¹÷°

hosts/storage-2/users.nix

@@ -0,0 +1,5 @@
+{ ... }:
+
+{
+  users.users.clerie.extraGroups = [ "data-firmware" ];
+}