oopsidentify

system/default.nix

@@ -1,6 +1,7 @@
 { config, pkgs, ... }:
 
 {
+
   nix = {
     settings.experimental-features = [ "nix-command" "flakes" ];
     gc.automatic = true;

system/web-server/jenkins.nix

@@ -1,5 +1,23 @@
 { config, pkgs, ... }:
 
 {
-  services.jenkins.enable = true;
+  services.jenkins = {
+    enable = true;
+    port = 7401;
+  };
+
+  security.acme.certs."${config.networking.domain}".extraDomainNames = [
+    "jenkins.${config.networking.domain}"
+  ];
+
+  services.nginx.virtualHosts = {
+    "jenkins.${config.networking.domain}" = {
+      onlySSL = true;
+      useACMEHost = config.networking.domain;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString config.services.jenkins.port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
 }

system/web-server/oopsidentify.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+
+{
+  services.nginx.virtualHosts."oops.t9e.me" = {
+    forceSSL = true;
+    enableACME = true;
+    root = "/var/www/oopsidentify/dist";
+  };
+}