start domain

configuration.nix

@@ -174,6 +174,7 @@
   services.openssh.enable = true;
   services.openssh.settings.PasswordAuthentication = false;
   # services.openssh.settings.PermitRootLogin = "proh";
+  services.nginx.enable = true;
   security.acme = {
     acceptTerms = true;
     defaults = {
@@ -181,8 +182,12 @@
       dnsProvider = "cloudflare";
       #     # location of your CLOUDFLARE_DNS_API_TOKEN=[value]
       #     # https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#EnvironmentFile=
-      environmentFile = "/etc/nixos/.secrets/cloudflare_dns_tokend";
+      environmentFile = "/etc/nixos/.secrets/cloudflare_zone_dns_edit";
     };
+    # certs."sondell.org" = {
+    #   domain = "*.sondell.org";
+    #   group = config.services.nginx.group;
+    # };
   };
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];

homepage.nix

@@ -1,10 +1,16 @@
-{ homepage, ... }:
-
-let
-  domain = "sondell.org";
+{homepage, ...}: let
+  domain1 = "sondell.org";
+  domain2 = "start.sondell.org";
   port = "8118";
-in
-{
+  hostSettings = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${port}/";
+      proxyWebsockets = true;
+    };
+  };
+in {
   systemd.services.homepage = {
     enable = true;
     description = "homepage with links to selfhosted services";
@@ -19,13 +25,6 @@ in
     };
   };
 
-  services.nginx.virtualHosts.${domain} = {
-    forceSSL = true;
-    enableACME = true;
-    locations."/" = {
-      proxyPass = "http://localhost:${port}/";
-      proxyWebsockets = true;
-    };
-  };
+  services.nginx.virtualHosts.${domain1} = hostSettings;
+  services.nginx.virtualHosts.${domain2} = hostSettings;
 }
-