feat: lab: +attic cache

nixos/system/hectic-lab/attic.nix

@@ -0,0 +1,17 @@
+{
+  domain,
+  ...
+}: { ... }: {
+  hectic.services.attic = {
+    enable   = true;
+    hostName = "cache.${domain}";
+  };
+
+  services.nginx.virtualHosts."cache.${domain}" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8080";
+    };
+  };
+}

nixos/system/hectic-lab/hectic-lab.nix

@@ -52,9 +52,10 @@ in {
 
     inputs.hectic-landing.nixosModules.hectic-landing
 
+    (import ./attic.nix              { inherit flake self inputs domain; })
     (import ./containers.nix          { inherit flake self inputs; })
-    (import ./mechabellum.nix         { inherit flake self inputs domain sslOpts; })
-    (import (./. + "/sentinèlla.nix") { inherit flake self inputs domain sslOpts; })
+    (import ./mechabellum.nix         { inherit flake self inputs domain; })
+    (import (./. + "/sentinèlla.nix") { inherit flake self inputs domain; })
   ];
 
   services.hectic-landing = {
@@ -205,8 +206,8 @@ in {
   services.nginx = {
     enable = true;
     # NOTE(yukkop): virtualHosts.${domain} is owned by the hectic-landing module
-    # (ACME-managed). See services.hectic-landing above.
-    virtualHosts."store.${domain}" = sslOpts // {
+    virtualHosts."store.${domain}" = {
+      enableACME = true;
       forceSSL = true;
       root = "/var/www/store";
       locations."/" = {
@@ -215,7 +216,8 @@ in {
         '';
       };
     };
-    virtualHosts."snuff.${domain}" = sslOpts // {
+    virtualHosts."snuff.${domain}" = {
+      enableACME = true;
       forceSSL = true;
       locations."/" = {
         extraConfig = ''
@@ -224,7 +226,8 @@ in {
         '';
       };
     };
-    virtualHosts."nrv.${domain}" = sslOpts // {
+    virtualHosts."nrv.${domain}" = {
+      enableACME = true;
       forceSSL = true;
       locations."/" = {
         extraConfig = ''
@@ -233,7 +236,8 @@ in {
         '';
       };
     };
-    virtualHosts."yukkop.${domain}" = sslOpts // {
+    virtualHosts."yukkop.${domain}" = {
+      enableACME = true;
       forceSSL = true;
       locations."/" = {
         extraConfig = ''

nixos/system/hectic-lab/mechabellum.nix

@@ -1,7 +1,6 @@
 {
   inputs,
   domain,
-  sslOpts,
   ...
 }: {
   pkgs,

nixos/system/hectic-lab/sentinèlla.nix

@@ -3,7 +3,6 @@
   flake,
   self,
   domain,
-  sslOpts,
   ...
 }: { ... }: {
   hectic.services."sentinèlla" = {
@@ -17,7 +16,8 @@
   };
 
   services.nginx = {
-    virtualHosts."probe.${domain}" = sslOpts // {
+    virtualHosts."probe.${domain}" = {
+      enableACME = true;
       forceSSL = true;
       locations."/" = {
         proxyPass = "http://127.0.0.1:5988";