basic home nginx on FELONYSPORK

hosts/felonyspork/configuration.nix

@@ -55,11 +55,17 @@
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
 
-  # Open ports in the firewall.
-  # networking.firewall.allowedTCPPorts = [ ... ];
-  # networking.firewall.allowedUDPPorts = [ ... ];
-  # Or disable the firewall altogether.
-  # networking.firewall.enable = false;
+  # NGINX webserver and ACME certs
+  services.nginx = {
+    enable = true;
+    virtualHosts."home.nora.codes" = {
+      root = "/var/www/home.nora.codes";
+    };
+    virtualHosts."test.home.nora.codes" = {
+      root = "/var/www/home.nora.codes";
+    };
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
 
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions