surgat: add share service

hosts/surgat/default.nix

@@ -23,6 +23,7 @@ in {
   dadada.networking.vpnExtension = "4";
   dadada.weechat.enable = true;
   dadada.homePage.enable = true;
+  dadada.share.enable = true;
   dadada.backupClient = {
     enable = true;
     bs = true;

modules/default.nix

@@ -5,6 +5,7 @@
   fido2 = ./fido2.nix;
   fileShare = ./fileShare.nix;
   networking = ./networking.nix;
+  share = ./share.nix;
   steam = ./steam.nix;
   update = ./update.nix;
   vpnServer = ./vpnServer.nix;

modules/module-list.nix

@@ -5,6 +5,7 @@
   ./fileShare.nix
   ./homepage.nix
   ./networking.nix
+  ./share.nix
   ./steam.nix
   ./update.nix
   ./vpnServer.nix

modules/share.nix

@@ -0,0 +1,30 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+let
+  cfg = config.dadada.share;
+in {
+  options.dadada.share = {
+    enable = mkEnableOption "Enable file share";
+  };
+  config = mkIf cfg.enable {
+    services.nginx.enable = true;
+
+    services.nginx.virtualHosts."share.dadada.li" = {
+      enableACME = true;
+      forceSSL = true;
+
+      root = "/var/lib/share";
+
+      locations = {
+        "/robots.txt" = {
+          extraConfig = ''
+            add_header Content-Type text/plain;
+            return 200 "User-agent: *\nDisallow: /\n";
+          '';
+        };
+      };
+    };
+  };
+}
+