From df52299784996c04014927b9d09cf7df5aaa2cc4 Mon Sep 17 00:00:00 2001
From: Julius de Jeu <julius@voidcorp.nl>
Date: Wed, 25 May 2022 00:42:05 +0200
Subject: [PATCH] Add galerie subdomains and make cdn point to s3

---
 nixos/machines/nginx/default.nix | 33 +++++++++++++++++++++++++-------
 1 file changed, 26 insertions(+), 7 deletions(-)

diff --git a/nixos/machines/nginx/default.nix b/nixos/machines/nginx/default.nix
index b280a2d..fabf522 100644
--- a/nixos/machines/nginx/default.nix
+++ b/nixos/machines/nginx/default.nix
@@ -43,21 +43,40 @@ in {
       enableACME = true;
       root = "/etc/main";
     };
+    virtualHosts."auth.asraphiel.dev" = k8sProxy;
+
     virtualHosts."git.asraphiel.dev" = proxy "http://gitea.lxd:3000/";
+    virtualHosts."drone.asraphiel.dev" = k8sProxy;
+
     virtualHosts."vault.asraphiel.dev" = proxy "http://vault.lxd:8200/";
+
     virtualHosts."s3.asraphiel.dev" = bigProxy "http://minio.lxd:9000/";
     virtualHosts."shell.s3.asraphiel.dev" = proxy "http://minio.lxd:9001/";
+    virtualHosts."cdn.voidcorp.nl" = {
+      forceSSL = true;
+      enableACME = true;
+      http2 = true;
+      globalRedirect = "s3.asraphiel.dev";
+    };
+    virtualHosts."cdn.asraphiel.dev" = k8sProxy;
+
     virtualHosts."registry.asraphiel.dev" = proxy "http://registry.lxd:5000/";
     virtualHosts."vaultwarden.asraphiel.dev" =
       proxy "http://vaultwarden.lxd:8000/";
-    virtualHosts."whoami.asraphiel.dev" = k8sProxy;
-    virtualHosts."auth.asraphiel.dev" = k8sProxy;
-    virtualHosts."drone.asraphiel.dev" = k8sProxy;
-    virtualHosts."galerie.asraphiel.dev" = k8sProxy;
-    virtualHosts."galerie-staging.asraphiel.dev" = k8sProxy;
-    virtualHosts."ansichtkaarten.asraphiel.dev" = k8sProxy;
+
     virtualHosts."groenehartansichtkaarten.nl" = k8sProxy;
-    virtualHosts."cdn.asraphiel.dev" = k8sProxy;
+    virtualHosts."ansichtkaarten.asraphiel.dev" = k8sProxy;
+
+    virtualHosts."galerievanslagmaat.nl" = k8sProxy;
+    virtualHosts."galerie.asraphiel.dev" = k8sProxy;
+    virtualHosts."staging.galerievanslagmaat.nl" = k8sProxy;
+    virtualHosts."galerie-staging.asraphiel.dev" = k8sProxy;
+    virtualHosts."www.galerievanslagmaat.nl" = {
+      forceSSL = true;
+      enableACME = true;
+      http2 = true;
+      globalRedirect = "galerievanslagmaat.nl";
+    };
   };
 
   security.acme.email = "acme@voidcorp.nl";