From f0d82c45fb4e5eb7e8a79d347a21cf60a4b42e36 Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Tue, 2 Apr 2024 22:14:17 +0200
Subject: [PATCH 1/2] hosts/web-2: Add md.clerie.de

---
 hosts/web-2/configuration.nix |  1 +
 hosts/web-2/hedgedoc.nix      | 42 +++++++++++++++++++++++++++++++++++
 2 files changed, 43 insertions(+)
 create mode 100644 hosts/web-2/hedgedoc.nix

diff --git a/hosts/web-2/configuration.nix b/hosts/web-2/configuration.nix
index 65a3e45..cf63314 100644
--- a/hosts/web-2/configuration.nix
+++ b/hosts/web-2/configuration.nix
@@ -12,6 +12,7 @@
       ./drop.nix
       ./fieldpoc.nix
       ./gitea.nix
+      ./hedgedoc.nix
       ./iot-data.nix
       ./ip.nix
       ./legal.nix
diff --git a/hosts/web-2/hedgedoc.nix b/hosts/web-2/hedgedoc.nix
new file mode 100644
index 0000000..6dc5625
--- /dev/null
+++ b/hosts/web-2/hedgedoc.nix
@@ -0,0 +1,42 @@
+{ ... }:
+
+{
+  services.hedgedoc = {
+    enable = true;
+    settings = {
+      domain = "md.clerie.de";
+      protocolUseSSL = true;
+      db = {
+        dialect = "postgres";
+        host = "/run/postgresql";
+      };
+      port = 3835;
+      host = "::1";
+
+      allowEmailRegister = false;
+    };
+  };
+
+  services.postgresql = {
+    ensureDatabases = [ "hedgedoc" ];
+    ensureUsers = [
+      {
+        name = "hedgedoc";
+        ensureDBOwnership = true;
+      }
+    ];
+  };
+
+  services.nginx.virtualHosts = {
+    "md.clerie.de" = {
+      enableACME = true;
+      forceSSL = true;
+      locations = {
+        "/" = {
+          proxyPass = "http://[::1]:3835";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}

From db4c58f0f9400b9b3bdac0aedf580433f4f6de11 Mon Sep 17 00:00:00 2001
From: Flake Update Bot <flake-update-bot@clerie.de>
Date: Wed, 3 Apr 2024 03:03:03 +0200
Subject: [PATCH 2/2] Update nixpkgs 2024-04-03-01-03

---
 flake.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/flake.lock b/flake.lock
index 65e82b1..2424176 100644
--- a/flake.lock
+++ b/flake.lock
@@ -212,11 +212,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1708118438,
-        "narHash": "sha256-kk9/0nuVgA220FcqH/D2xaN6uGyHp/zoxPNUmPCMmEE=",
+        "lastModified": 1711703276,
+        "narHash": "sha256-iMUFArF0WCatKK6RzfUJknjem0H9m4KgorO/p3Dopkk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "5863c27340ba4de8f83e7e3c023b9599c3cb3c80",
+        "rev": "d8fe5e6c92d0d190646fb9f1056741a229980089",
         "type": "github"
       },
       "original": {