website

configuration.nix

@@ -8,20 +8,17 @@
     ./services/nginx.nix
     ./services/openssh.nix
     ./services/forgejo.nix
-    # ./services/nextcloud.nix
-    # ./services/seafile.nix
     ./services/vaultwarden.nix
     ./services/jellyfin.nix
     ./services/website.nix
     ./services/mailserver.nix
     ./services/fail2ban.nix
-
     ./services/zed.nix # IMPORTANTE
-
     ./services/auto-torrent.nix
-
     ./services/misc.nix
 
+    ./services/website.nix
+
     ./modules/age.nix
     ./modules/git.nix
     ./modules/nix-settings.nix

services/nginx.nix

@@ -5,17 +5,6 @@
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
-
-    virtualHosts."spoodythe.one" = {
-      forceSSL = true;
-      enableACME = true;
-      default = true;
-      locations."/" = {
-        extraConfig = ''
-          deny all;
-        '';
-      };
-    };
   };
 
   security.acme.acceptTerms = true;

services/website.nix

@@ -5,12 +5,44 @@
 }: let
   host = "127.0.0.1";
   port = 8080;
+  user = "website-host-user";
+  uid = 1900;
 in {
   services.nginx.virtualHosts."spoodythe.one" = {
     enableACME = true;
     forceSSL = true;
+    default = true;
     locations."/" = {
       proxyPass = "http://${host}:${toString port}";
     };
   };
+
+  users.users."website-host-user" = {
+    isNormalUser = true;
+    inherit uid;
+  };
+
+  systemd.services."run-website" = {
+    description = "Service for running my website";
+    wants = ["network-online.target"];
+    wantedBy = ["multi-user.target"];
+
+    preStart = ''
+      if [ ! -d "/home/${user}/website" ]; then
+        ${pkgs.git}/bin/git clone https://gitlab.com/SpoodyTheOne/webbisitey/ "/home/${user}/website"
+      fi
+    '';
+
+    script = ''
+      cd /home/${user}/website
+      ${pkgs.git}/bin/git pull
+      ${pkgs.nix}/bin/nix run
+    '';
+
+    serviceConfig = {
+      Restart = "always";
+      User = user;
+      # WorkingDirectory = "/home/${user}/website";
+    };
+  };
 }