From f0d82c45fb4e5eb7e8a79d347a21cf60a4b42e36 Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Tue, 2 Apr 2024 22:14:17 +0200
Subject: [PATCH] hosts/web-2: Add md.clerie.de

---
 hosts/web-2/configuration.nix |  1 +
 hosts/web-2/hedgedoc.nix      | 42 +++++++++++++++++++++++++++++++++++
 2 files changed, 43 insertions(+)
 create mode 100644 hosts/web-2/hedgedoc.nix

diff --git a/hosts/web-2/configuration.nix b/hosts/web-2/configuration.nix
index 65a3e45..cf63314 100644
--- a/hosts/web-2/configuration.nix
+++ b/hosts/web-2/configuration.nix
@@ -12,6 +12,7 @@
       ./drop.nix
       ./fieldpoc.nix
       ./gitea.nix
+      ./hedgedoc.nix
       ./iot-data.nix
       ./ip.nix
       ./legal.nix
diff --git a/hosts/web-2/hedgedoc.nix b/hosts/web-2/hedgedoc.nix
new file mode 100644
index 0000000..6dc5625
--- /dev/null
+++ b/hosts/web-2/hedgedoc.nix
@@ -0,0 +1,42 @@
+{ ... }:
+
+{
+  services.hedgedoc = {
+    enable = true;
+    settings = {
+      domain = "md.clerie.de";
+      protocolUseSSL = true;
+      db = {
+        dialect = "postgres";
+        host = "/run/postgresql";
+      };
+      port = 3835;
+      host = "::1";
+
+      allowEmailRegister = false;
+    };
+  };
+
+  services.postgresql = {
+    ensureDatabases = [ "hedgedoc" ];
+    ensureUsers = [
+      {
+        name = "hedgedoc";
+        ensureDBOwnership = true;
+      }
+    ];
+  };
+
+  services.nginx.virtualHosts = {
+    "md.clerie.de" = {
+      enableACME = true;
+      forceSSL = true;
+      locations = {
+        "/" = {
+          proxyPass = "http://[::1]:3835";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}