treewide: format

modules/nixos/services/nginx.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 
 with lib;
 
@@ -34,7 +39,8 @@ let
       extraConfig = nginxErrorPages + nginxEdgeHeaders + nginxStrictHeaders;
     };
   };
-in {
+in
+{
   options.modules.services.nginx = {
     enable = mkOption {
       default = false;
@@ -44,8 +50,8 @@ in {
 
   config = mkIf cfg.enable {
     networking.firewall.allowedTCPPorts = [
-      80    # HTTP
-      443   # HTTPS
+      80 # HTTP
+      443 # HTTPS
     ];
 
     services.nginx = {
@@ -89,94 +95,99 @@ in {
           maxSize = "100m";
         };
       };
-      virtualHosts = {
-        ## Static sites
-        "jellyfin.vimium.com" = {
-          forceSSL = true;
-          enableACME = true;
-          extraConfig = nginxErrorPages + nginxEdgeHeaders;
-          locations."/" = {
-            proxyPass = "http://localhost:8000";
+      virtualHosts =
+        {
+          ## Static sites
+          "jellyfin.vimium.com" = {
+            forceSSL = true;
+            enableACME = true;
+            extraConfig = nginxErrorPages + nginxEdgeHeaders;
+            locations."/" = {
+              proxyPass = "http://localhost:8000";
+              extraConfig = ''
+                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+                proxy_set_header X-Forwarded-Proto $scheme;
+                proxy_set_header X-Real-IP $remote_addr;
+                proxy_set_header Host $host;
+
+                proxy_set_header Range $http_range;
+                proxy_set_header If-Range $http_if_range;
+
+                proxy_http_version 1.1;
+                proxy_set_header Upgrade $http_upgrade;
+                proxy_set_header Connection "upgrade";
+              '';
+            };
+          };
+          "jdholt.com" = {
+            forceSSL = true;
+            enableACME = true;
+            serverAliases = [ "www.jdholt.com" ];
+            extraConfig = nginxErrorPages + nginxEdgeHeaders + nginxStrictHeaders;
+            locations."/skycam/snapshot.jpg" = {
+              extraConfig = ''
+                set $backend "skycam.mesh.vimium.net:8080";
+
+                resolver 100.100.100.100;
+
+                proxy_pass http://$backend/snapshot;
+                proxy_cache skycam_cache;
+                proxy_cache_valid any 10s;
+                proxy_ignore_headers Cache-Control Expires Set-Cookie;
+              '';
+            };
+            locations."/".return = "301 https://vimium.com$request_uri";
+          };
+          "pki.vimium.com" = {
+            addSSL = true;
+            forceSSL = false;
+            enableACME = true;
             extraConfig = ''
-              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-              proxy_set_header X-Forwarded-Proto $scheme;
-              proxy_set_header X-Real-IP $remote_addr;
-              proxy_set_header Host $host;
-
-              proxy_set_header Range $http_range;
-              proxy_set_header If-Range $http_if_range;
-
-              proxy_http_version 1.1;
-              proxy_set_header Upgrade $http_upgrade;
-              proxy_set_header Connection "upgrade";
+              ${nginxErrorPages}
+              more_set_headers 'Server: Vimium';
             '';
+            locations."/" = {
+              root = "/var/www/pki.vimium.com";
+            };
           };
-        };
-        "jdholt.com" = {
-          forceSSL = true;
-          enableACME = true;
-          serverAliases = [ "www.jdholt.com" ];
-          extraConfig = nginxErrorPages + nginxEdgeHeaders + nginxStrictHeaders;
-          locations."/skycam/snapshot.jpg" = {
-            extraConfig = ''
-              set $backend "skycam.mesh.vimium.net:8080";
-
-              resolver 100.100.100.100;
-
-              proxy_pass http://$backend/snapshot;
-              proxy_cache skycam_cache;
-              proxy_cache_valid any 10s;
-              proxy_ignore_headers Cache-Control Expires Set-Cookie;
-            '';
+          "suhailhussain.com" = {
+            forceSSL = true;
+            enableACME = true;
+            serverAliases = [ "www.suhailhussain.com" ];
+            extraConfig = nginxErrorPages + nginxEdgeHeaders + nginxStrictHeaders;
+            locations."/" = {
+              root = "/var/www/suhailhussain.com";
+            };
           };
-          locations."/".return = "301 https://vimium.com$request_uri";
-        };
-        "pki.vimium.com" = {
-          addSSL = true;
-          forceSSL = false;
-          enableACME = true;
-          extraConfig = ''
-            ${nginxErrorPages}
-            more_set_headers 'Server: Vimium';
-          '';
-          locations."/" = {
-            root = "/var/www/pki.vimium.com";
+          "vimium.com" = {
+            default = true;
+            forceSSL = true;
+            enableACME = true;
+            serverAliases = [ "www.vimium.com" ];
+            extraConfig =
+              nginxErrorPages
+              + nginxEdgeHeaders
+              + nginxStrictHeaders
+              + ''
+                add_header Content-Security-Policy "default-src 'self' https://vimium.com https://www.vimium.com; style-src 'unsafe-inline'; object-src 'none'; upgrade-insecure-requests" always;
+              '';
+            locations."/" = {
+              root = "/var/www/vimium.com";
+            };
           };
-        };
-        "suhailhussain.com" = {
-          forceSSL = true;
-          enableACME = true;
-          serverAliases = [ "www.suhailhussain.com" ];
-          extraConfig = nginxErrorPages + nginxEdgeHeaders + nginxStrictHeaders;
-          locations."/" = {
-            root = "/var/www/suhailhussain.com";
-          };
-        };
-        "vimium.com" = {
-          default = true;
-          forceSSL = true;
-          enableACME = true;
-          serverAliases = [ "www.vimium.com" ];
-          extraConfig = nginxErrorPages + nginxEdgeHeaders + nginxStrictHeaders + ''
-            add_header Content-Security-Policy "default-src 'self' https://vimium.com https://www.vimium.com; style-src 'unsafe-inline'; object-src 'none'; upgrade-insecure-requests" always;
-          '';
-          locations."/" = {
-            root = "/var/www/vimium.com";
-          };
-        };
-      }
-      ## Redirects
-      // (mkRedirect "h0lt.com" "jdholt.com")
-      // (mkRedirect "jordanholt.xyz" "jdholt.com")
-      // (mkRedirect "omnimagic.com" "vimium.com")
-      // (mkRedirect "omnimagic.net" "vimium.com")
-      // (mkRedirect "thelostlegend.com" "suhailhussain.com")
-      // (mkRedirect "vimium.co" "vimium.com")
-      // (mkRedirect "vimium.co.uk" "vimium.com")
-      // (mkRedirect "vimium.info" "vimium.com")
-      // (mkRedirect "vimium.net" "vimium.com")
-      // (mkRedirect "vimium.org" "vimium.com")
-      // (mkRedirect "vimium.xyz" "vimium.com");
+        }
+        ## Redirects
+        // (mkRedirect "h0lt.com" "jdholt.com")
+        // (mkRedirect "jordanholt.xyz" "jdholt.com")
+        // (mkRedirect "omnimagic.com" "vimium.com")
+        // (mkRedirect "omnimagic.net" "vimium.com")
+        // (mkRedirect "thelostlegend.com" "suhailhussain.com")
+        // (mkRedirect "vimium.co" "vimium.com")
+        // (mkRedirect "vimium.co.uk" "vimium.com")
+        // (mkRedirect "vimium.info" "vimium.com")
+        // (mkRedirect "vimium.net" "vimium.com")
+        // (mkRedirect "vimium.org" "vimium.com")
+        // (mkRedirect "vimium.xyz" "vimium.com");
     };
   };
 }