refactor web server, hardware

system/web-server/default.nix

@@ -0,0 +1,21 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfree = true;
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  services.jenkins.enable = true;
+
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "till@ktiu.net";
+  };
+
+}

system/web-server/outline.nix

@@ -1,32 +1,16 @@
 { config, pkgs, ... }:
 
 {
-  nixpkgs.config.allowUnfree = true;
-
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
-
-  services.jenkins.enable = true;
 
   services.outline = {
     enable = true;
     storage.storageType = "local";
   };
 
-  services.nginx = {
-    enable = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-  };
-
-  security.acme = {
-    acceptTerms = true;
-    defaults.email = "till@ktiu.net";
-  };
-
   services.nginx.virtualHosts."outline.ktiu.net" = {
     addSSL = true;
     enableACME = true;
-    root = "/var/www/myhost.org";
+    # root = "/var/www/myhost.org";
     locations."/" = {
       proxyPass = "http://127.0.0.1:3000";
       extraConfig =