refactor web server, hardware

system/web-server/default.nix

@@ -0,0 +1,21 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfree = true;
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  services.jenkins.enable = true;
+
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "till@ktiu.net";
+  };
+
+}