fix: redirect root IP's in nginx to skynet.ie

applications/bitwarden/vaultwarden.nix

@@ -47,13 +47,20 @@ in {
       }
     ];
 
-    services.nginx.virtualHosts."${domain}" = {
+    services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
+      "${domain}" = {
         forceSSL = true;
         useACMEHost = "skynet";
         locations."/" = {
           proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
         };
       };
+    };
 
     # has ADMIN_TOKEN and SMTP_PASSWORD
     age.secrets.bitwarden_details.file = ../../secrets/bitwarden/details.age;

applications/email.nix

@@ -245,6 +245,12 @@ in {
 
     # to provide the certs
     services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
+
       "mail.skynet.ie" = {
         forceSSL = true;
         useACMEHost = "mail";

applications/games.nix

@@ -60,6 +60,12 @@ in {
     ];
 
     services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
+
       "${cfg.domain.sub}.skynet.ie" = {
         forceSSL = true;
         useACMEHost = "skynet";

applications/games/minecraft.nix

@@ -108,6 +108,12 @@ in {
     ];
 
     services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
+
       # https://config.minecraft.games.skynet.ie
       "config.${short_domain}" = {
         forceSSL = true;

applications/gitlab.nix

@@ -150,6 +150,12 @@ in {
     services.openssh.ports = [22 2222];
 
     services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
+
       # main site
       "${cfg.domain.sub}.${cfg.domain.base}.${cfg.domain.tld}" = {
         forceSSL = true;

applications/nextcloud.nix

@@ -108,6 +108,11 @@ in {
     };
 
     services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
       ${domain} = {
         forceSSL = true;
         useACMEHost = "skynet";

applications/skynet_users.nix

@@ -68,6 +68,12 @@ in {
     systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
 
     services.nginx.virtualHosts = {
+      "${cfg.host.ip}" = {
+        forceSSL = true;
+        useACMEHost = "skynet";
+        locations."/".return = "307 https://skynet.ie";
+      };
+
       # main site
       "*.users.skynet.ie" = {
         forceSSL = true;

applications/ulfm.nix

@@ -93,10 +93,22 @@ in {
       };
     };
 
-    services.nginx.virtualHosts."${cfg.domain.sub}.${cfg.domain.base}.${cfg.domain.tld}" = {
+    services.nginx = {
+      enable = true;
+      group = "acme";
+
+      virtualHosts = {
+        "${cfg.domain.sub}.${cfg.domain.base}.${cfg.domain.tld}" = {
           forceSSL = true;
           useACMEHost = "skynet";
           locations."/".proxyPass = "http://localhost:8000";
         };
+        "${cfg.host.ip}" = {
+          forceSSL = true;
+          useACMEHost = "skynet";
+          locations."/".return = "307 https://skynet.ie";
+        };
+      };
+    };
   };
 }