diesdas

system/web-server/default.nix

@@ -22,7 +22,10 @@
         };
       };
       "${config.networking.fqdn}-80" = {
-        serverAliases = [ "*.ktiu.net" "*.t9e.me" ];
+        serverAliases = [
+          "*.ktiu.net"
+          "*.t9e.me"
+        ];
         locations."/.well-known/acme-challenge" = {
           root = "/var/lib/acme/.challenges";
         };

system/web-server/kein-schlussstrich-hessen.org

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  services.nginx.virtualHosts."kein-schlussstrich-hessen.org" = {
+    forceSSL = true;
+    enableACME = true;
+    root = "/var/www/kein-schlussstrich-hessen.org/dist";
+  };
+
+  services.nginx.virtualHosts."kein-schlussstrich-hessen.de" = {
+    serverAliases = [
+      "www.kein-schlussstrich-hessen.de"
+      "www.kein-schlussstrich-hessen.org"
+    ]
+    globalRedirect = "kein-schlussstrich-hessen.org";
+    enableACME = true;
+  };
+}

system/web-server/ksh-map.nix

@@ -1,15 +1,10 @@
 { config, pkgs, ... }:
 
 {
-  security.acme.certs."${config.networking.domain}".extraDomainNames = [ "kshmap.ktiu.net" ];
-
-  services.nginx.virtualHosts."kshmap.ktiu.net" = {
-
-    # forceSSL = true;
-    # enableACME = true;
-
+  services.nginx.virtualHosts."karte.kein-schlussstrich-hessen.org" = {
+    forceSSL = true;
+    enableACME = true;
     onlySSL = true;
-    useACMEHost = config.networking.domain;
     root = "/var/www/ksh-map/dist";
   };
 }