Serve bubblesort on web-2

configuration/common/default.nix

@@ -38,6 +38,11 @@
   services.openssh.challengeResponseAuthentication = false;
   services.openssh.permitRootLogin = lib.mkDefault "no";
 
+  security.acme = {
+    email = "letsencrypt@clerie.de";
+    acceptTerms = true;
+  };
+
   nixpkgs.overlays = [
     (import ../../pkgs/overlay.nix)
   ];

hosts/web-2/bubblesort.nix

@@ -0,0 +1,13 @@
+{ ... }:
+{
+  services.nginx.virtualHosts = {
+    "bubblesort.clerie.de" = {
+      enableACME = true;
+      forceSSL = true;
+      root = fetchGit {
+        url = "https://git.clerie.de/clerie/bubblesort_js.git";
+        rev = "39d54701a11f4fb48d7e023e384a848e6bde5640";
+      };
+    };
+  };
+}

hosts/web-2/configuration.nix

@@ -5,11 +5,12 @@
     [
       ./hardware-configuration.nix
       ../../configuration/common
+      ./bubblesort.nix
     ];
 
   boot.loader.grub.enable = true;
   boot.loader.grub.version = 2;
-  boot.loader.grub.device = "/dev/vda";
+  boot.loader.grub.device = "/dev/sda";
 
   networking.hostName = "web-2";
 
@@ -30,5 +31,7 @@
     recommendedTlsSettings = true;
   };
 
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
   system.stateVersion = "21.03";
 }