infovhost: Init

This avoids boilerplate code for displaying the imprint on the fqdn of
the machine.

machines/nazuna/configuration.nix

@@ -9,6 +9,7 @@
   sbruder = {
     nginx.hardening.enable = true;
     wireguard.home.enable = true;
+    infovhost.enable = true;
   };
 
   networking.hostName = "nazuna";

machines/okarin/configuration.nix

@@ -13,23 +13,13 @@
     nginx.hardening.enable = true;
     full = false;
     wireguard.home.enable = true;
+    infovhost.enable = true;
   };
 
   networking.hostName = "okarin";
 
   system.stateVersion = "22.11";
 
-  services.nginx = {
-    enable = true;
-
-    virtualHosts."okarin.sbruder.de" = {
-      enableACME = true;
-      forceSSL = true;
-
-      root = pkgs.sbruder.imprint;
-    };
-  };
-
   networking.firewall.allowedTCPPorts = [
     80
     443

machines/renge/configuration.nix

@@ -26,6 +26,7 @@
     nginx.hardening.enable = true;
     restic.system.enable = true;
     wireguard.home.enable = true;
+    infovhost.enable = true;
   };
 
   networking.hostName = "renge";

machines/vueko/configuration.nix

@@ -15,6 +15,7 @@
     restic.system.enable = true;
     wireguard.home.enable = true;
     full = false;
+    infovhost.enable = true;
 
     mailserver = {
       enable = true;

machines/yuzuru/configuration.nix

@@ -10,23 +10,13 @@
     nginx.hardening.enable = true;
     full = false;
     wireguard.home.enable = true;
+    infovhost.enable = true;
   };
 
   networking.hostName = "yuzuru";
 
   system.stateVersion = "23.11";
 
-  services.nginx = {
-    enable = true;
-
-    virtualHosts."yuzuru.sbruder.de" = {
-      enableACME = true;
-      forceSSL = true;
-
-      root = pkgs.sbruder.imprint;
-    };
-  };
-
   networking.firewall.allowedTCPPorts = [
     80
     443

modules/default.nix

@@ -35,6 +35,7 @@
     ./games.nix
     ./grub.nix
     ./gui.nix
+    ./infovhost.nix
     ./initrd-ssh.nix
     ./locales.nix
     ./logitech.nix

modules/infovhost.nix

@@ -0,0 +1,34 @@
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.sbruder.infovhost;
+in
+{
+  options.sbruder.infovhost = {
+    enable = lib.mkEnableOption "a vhost displaying legal and/or technical information on the domain of the machine";
+    domain = lib.mkOption {
+      type = lib.types.str;
+      default =
+        if (!(isNull config.networking.domain))
+        then config.networking.domain
+        else "sbruder.de";
+      description = "The domain part of the fqdn.";
+    };
+    fqdn = lib.mkOption {
+      type = lib.types.str;
+      default = "${config.networking.hostName}.${cfg.domain}";
+      description = "The fqdn the vhost should listen on.";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.nginx.enable = true;
+    services.nginx.virtualHosts."${cfg.fqdn}" = {
+      enableACME = true;
+      forceSSL = true;
+
+      default = true;
+
+      root = pkgs.sbruder.imprint;
+    };
+  };
+}