decisions: init

flake.nix

@@ -90,6 +90,8 @@
             ./modules/initrd-ssh.nix
             ./modules/fsrewsp.nix
             ./modules/nightline.nix
+            ./modules/decisions.nix
+            # ./modules/struktur-bot.nix
             {
               nixpkgs.overlays = [ self.overlays.default ];
               sops.defaultSopsFile = ./secrets/quitte.yaml;

modules/decisions.nix

@@ -0,0 +1,30 @@
+{ config, pkgs, ... }:
+let
+  domain = "decisions.${config.networking.domain}";
+in
+{
+  virtualisation.oci-containers = {
+    backend = "docker";
+    containers.decicions = {
+      image = "decisions";
+      volumes = [
+        "/var/lib/nextcloud/data/root/files/FSR/protokolle:/protokolle:ro"
+      ];
+      extraOptions = [ "--network=host" ];
+    };
+  };
+
+  services.nginx = {
+    virtualHosts."${domain}" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:5055";
+      };
+      extraConfig = ''
+        auth_pam "LDAP Authentication Required";
+        auth_pam_service_name "nginx";
+      '';
+    };
+  };
+}