fix: centralise with one ssl certificate

modules/sv1.nix

@@ -202,20 +202,28 @@
     };
     nginx = {
       enable = true;
-      virtualHosts."gitea.dylanblades.com" = {
-        forceSSL = true;
-        enableACME = true;
-        locations."/" = {
-          proxyPass = "http://localhost:3000";
-          extraConfig = ''
-            client_max_body_size 512M;
-            proxy_set_header Connection $http_connection;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-          '';
+      virtualHosts = {
+        "dylanblades.com" = {
+          forceSSL = true;
+          enableACME = true;
+          serverAliases = ["*.dylanblades.com"];
+          root = pkgs.my-site;
+        };
+        "gitea.dylanblades.com" = {
+          forceSSL = true;
+          useACMEHost = true;
+          locations."/" = {
+            proxyPass = "http://localhost:3000";
+            extraConfig = ''
+              client_max_body_size 512M;
+              proxy_set_header Connection $http_connection;
+              proxy_set_header Upgrade $http_upgrade;
+              proxy_set_header Host $host;
+              proxy_set_header X-Real-IP $remote_addr;
+              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+              proxy_set_header X-Forwarded-Proto $scheme;
+            '';
+          };
         };
       };
     };

packages/default.nix

@@ -1,3 +1,4 @@
 {pkgs}: {
   my-vim = pkgs.callPackage ./my-vim {};
+  my-site = pkgs.callPackage ./my-site {};
 }

packages/my-site/default.nix

@@ -0,0 +1,2 @@
+{writeTextDir}:
+writeTextDir "index.html" "my-site"