boxes/netbox/default.nix

@@ -32,6 +32,7 @@
     tree
     dig
     htop
+    gnumake
     neovim
   ];
 
@@ -146,6 +147,8 @@
     ports = [55555];
   };
 
+  services.endlessh.enable = true;
+  services.endlessh.port = 22;
   services.vaultwarden.enable = true;
   services.vaultwarden.config = {
     DOMAIN = "https://bitwarden.beepboop.systems";
@@ -192,12 +195,6 @@
     forceSSL = true;
     enableACME = true;
     root = "/var/www/beepboop.systems";
-    locations."/" = {
-    	extraConfig = ''
-    	  port_in_redirect off;
-	  absolute_redirect off;
-    	'';
-    };
   };
 
   services.nginx.virtualHosts."git.beepboop.systems" = {
@@ -247,9 +244,50 @@
     globalRedirect = "radicale.beepboop.systems";
   };
 
+  services.nginx.virtualHosts."skillissue.agency" = {
+    forceSSL = true;
+    enableACME = true;
+    root = "/var/www/skillissue.agency";
+  };
+
   security.acme = {
     acceptTerms = true;
-    defaults.email = "nickforanick@protonmail.com";
+    email = "nickforanick@protonmail.com";
+  };
+
+#  services.roundcube = {
+#    enable = true;
+#    # this is the url of the vhost, not necessarily the same as the fqdn of
+#    # the mailserver
+#    hostName = "cube.beepboop.systems";
+#    extraConfig = ''
+#      # starttls needed for authentication, so the fqdn required to match
+#      # the certificate
+#      $config['smtp_server'] = "tls://${config.mailserver.fqdn}";
+#      $config['smtp_user'] = "%u";
+#      $config['smtp_pass'] = "%p";
+#    '';
+#  };
+
+  services.nginx.virtualHosts."roundcube.beepboop.systems" = {
+    forceSSL = true;
+    enableACME = true;
+    globalRedirect = "cube.beepboop.systems";
+  };
+
+  services.nginx.virtualHosts."mail.beepboop.systems" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/bridge-submit" = {
+      extraConfig = ''
+        proxy_pass http://localhost:8041;
+      '';
+    };
+    locations."/" = {
+      extraConfig = ''
+        return 301 https://cube.beepboop.systems;
+      '';
+    };
   };
 
   networking.firewall = {