Modularize nginx

modules/system/services/server/webhost/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+{
+  imports = [
+    ./nginx
+    ./rtmp
+    ./virtualhosts
+  ];
+}

modules/system/services/server/webhost/nginx/default.nix

@@ -0,0 +1,14 @@
+{ pkgs, config, ... }:
+{
+  services.nginx = {
+    enable = true;
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    recommendedProxySettings = true;
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80 443
+  ];
+}

modules/system/services/server/webhost/rtmp/default.nix

@@ -0,0 +1,27 @@
+{ pkgs, config, ... }:
+{
+  services.nginx = {
+    package = (pkgs.nginx.override {
+      modules = with pkgs.nginxModules; [ rtmp ];
+    });
+    appendConfig = ''
+      rtmp {
+        server {
+          listen 1935;
+          chunk_size 4096;
+          allow publish all;
+          application stream {
+            record off;
+            live on;
+            allow play all;
+            hls on;
+            hls_path /var/www/Jimbo-Landing-Page/streams/hls/;
+            hls_fragment_naming system;
+            hls_fragment 3;
+            hls_playlist_length 40;
+          }
+        }
+      }
+    '';
+  };
+}

modules/system/services/server/webhost/virtualhosts/default.nix

@@ -0,0 +1,6 @@
+{ ... }:
+{
+  imports = [
+    ./jimDomain
+  ];
+}

modules/system/services/server/webhost/virtualhosts/jimDomain/default.nix

@@ -0,0 +1,39 @@
+{ pkgs, config, ... }:
+{
+  services.nginx.virtualHosts = {
+    "${config.secrets.jimDomain}" =  {
+      enableACME = true;
+      addSSL = true;
+      root = "/var/www/Jimbo-Landing-Page";
+      locations = {
+        "/.well-known/matrix/client" = {
+          extraConfig = ''
+            default_type application/json;
+            return 200 '
+            {
+              "m.homeserver": {
+                "base_url": "https://matrix.${config.secrets.jimDomain}"
+              },
+              "m.identity_server": {
+                "base_url": "https://matrix.org"
+              },
+              "org.matrix.msc3575.proxy": {
+                "url": "https://matrix.${config.secrets.jimDomain}"
+              }
+            }';
+          '';
+        };
+        "/.well-known/matrix/server" = {
+          extraConfig = ''
+            default_type application/json;
+            return 200 '{"m.server": "matrix.${config.secrets.jimDomain}:443"}';
+          '';
+        };
+      };
+    };
+  };
+
+  systemd.services.nginx.serviceConfig = {
+    ReadWritePaths = [ "/var/www/Jimbo-Landing-Page/streams/hls/" ];
+  };
+}