Deploy iot-data

hosts/web-2/configuration.nix

@@ -9,6 +9,7 @@
       ./bubblesort.nix
       ./clerie.nix
       ./gitea.nix
+      ./iot-data.nix
       ./ip.nix
       ./meow.nix
       ./milchinsel.nix

hosts/web-2/iot-data.nix

@@ -0,0 +1,37 @@
+{pkgs, ...}:
+
+{
+  users.users.iot-data = {
+    description = "IOT Data Service";
+    group = "iot-data";
+    home = "/var/lib/iot-data/";
+    useDefaultShell = true;
+    isSystemUser = true;
+  };
+  users.groups.iot-data = {};
+
+  systemd.services.iot-data = {
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      RuntimeDirectory = "iot-data";
+      StateDirectory = "iot-data";
+      User = "iot-data";
+      Group = "iot-data";
+    };
+    environment = {
+      IOT_DATA_CONFIG = "/var/src/iot-data-config.json";
+    };
+    script = "gunicorn -w 1 -b [::1]:8235 iot_data:app";
+    path = with pkgs; [ (python38.withPackages (ps: [ ps.gunicorn iot-data ])) ];
+  };
+
+  services.nginx.virtualHosts = {
+    "iot-data.clerie.de" = {
+      enableACME = true;
+      addSSL = true;
+      locations."/" = {
+        proxyPass = "http://[::1]:8235";
+      };
+    };
+  };
+}