switch to srvos nginx module

build02/configuration.nix

@@ -5,7 +5,6 @@
     ../roles/common.nix
     ../roles/hetzner/amd.nix
     ../roles/hetzner/network.nix
-    ../roles/nginx.nix
     ../roles/raid.nix
     ../roles/remote-builder/aarch64-build04.nix
   ];

build03/configuration.nix

@@ -14,7 +14,6 @@
     ../roles/hetzner/amd.nix
     ../roles/hetzner/network.nix
     ../roles/hercules-ci
-    ../roles/nginx.nix
     ../roles/raid.nix
     ../roles/remote-builder/aarch64-build04.nix
 

flake.nix

@@ -92,6 +92,7 @@
                       ;
                   })
                   ./build02/configuration.nix
+                  inputs.srvos.nixosModules.nginx
                 ];
             };
 
@@ -104,6 +105,7 @@
                     inherit (inputs) nur-update;
                   })
                   ./build03/configuration.nix
+                  inputs.srvos.nixosModules.nginx
                 ];
             };
 

roles/nginx.nix

@@ -1,38 +0,0 @@
-{ config, ... }:
-
-{
-  networking.firewall.allowedTCPPorts = [ 443 80 ];
-
-  # nginx is being used as the frontend HTTP server for all the services
-  # running on the box
-  services.nginx = {
-    enable = true;
-
-    recommendedGzipSettings = true;
-    recommendedOptimisation = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-
-    # Should we have this?
-    #commonHttpConfig = ''
-    #  add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload' always;
-    #'';
-
-    resolver.addresses =
-      if config.networking.nameservers == [ ]
-      then [ "1.1.1.1" ]
-      else config.networking.nameservers;
-
-    sslDhparam = config.security.dhparams.params.nginx.path;
-
-    # FIXME:
-    # nginx: [alert] could not open error log file: open() "/var/log/nginx/error.log" failed (2: No such file or directory)
-    # 2022/12/23 02:57:47 [emerg] 7#7: BIO_new_file("/var/lib/dhparams/nginx.pem") failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/var/lib/dhparams/nginx.pem, r) error:10000080:BIO routines::no such file)
-    validateConfig = false;
-  };
-
-  security.dhparams = {
-    enable = true;
-    params.nginx = { };
-  };
-}