From ae431ac3dc322688403d9cc00419b8e856f02438 Mon Sep 17 00:00:00 2001
From: Till <till@ktiu.net>
Date: Thu, 3 Jul 2025 23:56:40 +0200
Subject: [PATCH] oopsidentify

---
 flake.nix                          |  2 +-
 system/default.nix                 |  1 +
 system/web-server/jenkins.nix      | 20 +++++++++++++++++++-
 system/web-server/oopsidentify.nix |  9 +++++++++
 4 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 system/web-server/oopsidentify.nix

diff --git a/flake.nix b/flake.nix
index 761a0e9..cb5295b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -79,7 +79,7 @@
           ./system/web-server/outline.nix
           ./system/web-server/jenkins.nix
           ./system/web-server/mail
-          ./system/web-server/ksh-map.nix
+          ./system/web-server/oopsidentify.nix
           ./system/web-server/fundkorb-button.nix
         ];
       };
diff --git a/system/default.nix b/system/default.nix
index b30e810..4b5f042 100644
--- a/system/default.nix
+++ b/system/default.nix
@@ -1,6 +1,7 @@
 { config, pkgs, ... }:
 
 {
+
   nix = {
     settings.experimental-features = [ "nix-command" "flakes" ];
     gc.automatic = true;
diff --git a/system/web-server/jenkins.nix b/system/web-server/jenkins.nix
index 0c948a1..e9b5e4d 100644
--- a/system/web-server/jenkins.nix
+++ b/system/web-server/jenkins.nix
@@ -1,5 +1,23 @@
 { config, pkgs, ... }:
 
 {
-  services.jenkins.enable = true;
+  services.jenkins = {
+    enable = true;
+    port = 7401;
+  };
+
+  security.acme.certs."${config.networking.domain}".extraDomainNames = [
+    "jenkins.${config.networking.domain}"
+  ];
+
+  services.nginx.virtualHosts = {
+    "jenkins.${config.networking.domain}" = {
+      onlySSL = true;
+      useACMEHost = config.networking.domain;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString config.services.jenkins.port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
 }
diff --git a/system/web-server/oopsidentify.nix b/system/web-server/oopsidentify.nix
new file mode 100644
index 0000000..adfff42
--- /dev/null
+++ b/system/web-server/oopsidentify.nix
@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+
+{
+  services.nginx.virtualHosts."oops.t9e.me" = {
+    forceSSL = true;
+    enableACME = true;
+    root = "/var/www/oopsidentify/dist";
+  };
+}