From ce9e245000e52c0a4d6281da89a387da5e1b0b03 Mon Sep 17 00:00:00 2001
From: Brendan Golden <git_laptop@brendan.ie>
Date: Fri, 21 Apr 2023 01:22:16 +0100
Subject: [PATCH] ulfm: prepping to setup ulfm

---
 machines/galatea.nix | 33 +++++++++++++++------------------
 1 file changed, 15 insertions(+), 18 deletions(-)

diff --git a/machines/galatea.nix b/machines/galatea.nix
index 38990d9..b8a1859 100644
--- a/machines/galatea.nix
+++ b/machines/galatea.nix
@@ -22,15 +22,21 @@ let
   feck = "d9J4jDsJPuMPUMAAE4J4tH37HsmxEDze";
 in {
   imports = [
-    # applications for this particular server
+    # general stuff for config
     ../applications/firewall.nix
     ../applications/dns.nix
+    # web stuff
+    ../applications/nginx.nix
+    #../applications/acme.nix
+    # specific to tis server
   ];
 
   deployment = {
     targetHost = hostname;
     targetPort = 22;
     targetUser = "root";
+
+    tags = [ "active" ];
   };
 
   # these two are to be able to add the rules for firewall and dns
@@ -47,27 +53,18 @@ in {
     ];
     cname = [
       # this is also the stream server
-      "stream           CNAME   ${name}"
+      #"stream           CNAME   ${name}"
+      "ulfm             CNAME   ${name}"
     ];
   };
 
-  networking.firewall.allowedTCPPorts = [
-    22
-    80
-    443
-    8000
-  ];
+  networking.firewall.allowedTCPPorts = [ 8000 ];
 
-  # config for icecast is smol so can have it in this
-  services.icecast = {
-    enable = true;
-    hostname = hostname;
-
-    admin = {
-      user = "admin";
-      password = feck;
+  services = {
+    nginx.virtualHosts."ulfm.skynet.ie" = {
+      #forceSSL = true;
+      #useACMEHost = "skynet";
+    #  locations."/gw2".proxyPass = "http://localhost:8085";
     };
-
   };
-
 }