Added mcwhirter.io

hosts/cuallaidh.nix

@@ -13,6 +13,7 @@
       #../roles/hydra.nix
       ../roles/iohk.nix
       ../roles/matrix.nix
+      ../roles/mcwhirter.io.nix
       ../roles/nextcloud.nix
       ../roles/nixpkgs-dev.nix
       ../roles/taskserver.nix

roles/mcwhirter.io.nix

@@ -0,0 +1,56 @@
+# NixOps configuration for deploying the mcwhirter.io website
+
+{ config, pkgs, ...}:
+
+let
+  mcwhirter-io = import (pkgs.fetchgit {
+    name       = "mcwhirter-io-src";
+    url        = "https://source.mcwhirter.io/craige/mcwhirter.io.git";
+    branchName = "master";
+    sha256     = "0g4swgrbx7hg0ip6if15hlm9frx8is2385lwkxyx2gkpg66p3f26";
+  }) { nixpkgs = pkgs; };
+  webdomain = "mcwhirter.io";
+
+in {
+
+  environment.sessionVariables = {
+    LOCALE_ARCHIVE = "/run/current-system/sw/lib/locale/locale-archive";
+  };
+
+  services.nginx = {
+    enable = true;                     # Enable Nginx
+    recommendedGzipSettings  = true;
+    recommendedOptimisation  = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings   = true;
+    virtualHosts = {
+      "${webdomain}" = {               # website hostname
+        enableACME = true;             # Use ACME certs
+        forceSSL = true;               # Force SSL
+        root = "${mcwhirter-io}";      # Wesbite root
+      };
+      "www.${webdomain}" = {           # Respect our elders :-)
+        #forceSSL = true;
+        #enableACME = true;
+        locations."/".extraConfig = "return 301 $scheme://${webdomain}$request_uri;";
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = {
+      "${webdomain}" = {
+        email = "admin@${webdomain}";
+        group = "matrix-synapse";
+        allowKeysForGroup = true;
+      };
+      #"www.${webdomain}" = {
+      #  email = "admin@${webdomain}";
+      #};
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+}