apu: add invidious

hosts/apu/configuration.nix

@@ -272,18 +272,30 @@
     };
   };
 
-  services.webserver = {
-    enable = true;
-    acme.dnsChallenge = true;
-    vHosts."koti.repomaa.com" = {
-      proxyBuffering = false;
-      locations."/".proxyPort = 8123;
+  services = {
+    webserver = {
+      enable = true;
+      acme.dnsChallenge = true;
+      vHosts."koti.repomaa.com" = {
+        proxyBuffering = false;
+        locations."/".proxyPort = 8123;
+      };
+    };
+
+    invidious = {
+      enable = true;
+      subdomain = "vid";
     };
   };
 
-  networking.nftables.enable = true;
-  networking.firewall.enable = true;
-  networking.useDHCP = false;
+  security.acme.defaults.environmentFile = config.age.secrets.hetzner.path;
+
+  networking = {
+    nftables.enable = true;
+    firewall.enable = true;
+    useDHCP = false;
+    domain = "repomaa.com";
+  };
 
   system.stateVersion = "24.05";
 }

hosts/apu/default.nix

@@ -6,6 +6,7 @@ in
   imports = [
     ./hardware-configuration.nix
     ./configuration.nix
+    ./secrets.nix
     nixos-hardware.nixosModules.pcengines-apu
   ];
 }

hosts/apu/secrets.nix

@@ -0,0 +1,15 @@
+{ lib, ... }:
+{
+  age.secrets = lib.listToAttrs (
+    map
+      (secret: {
+        name = secret;
+        value = {
+          file = ../../secrets/${secret}.age;
+        };
+      })
+      [
+        "hetzner"
+      ]
+  );
+}

secrets/secrets.nix

@@ -36,4 +36,5 @@ in
   "mosquitto/mokkimaatti.age".publicKeys = users ++ [ freun-dev ];
   "gitlab-runner/default.age".publicKeys = users ++ [ freun-dev ];
   "gitlab-runner/docker.age".publicKeys = users ++ [ freun-dev ];
+  "hetzner.age".publicKeys = users ++ [ apu ];
 }