1 files changed, 32 insertions, 0 deletions
diff --git a/host/Rory-ovh/services/email/nginx.nix b/host/Rory-ovh/services/email/nginx.nix
new file mode 100644
index 0000000..5b04612
--- /dev/null
+++ b/host/Rory-ovh/services/email/nginx.nix
@@ -0,0 +1,32 @@
+{ config, ... }:
+{
+  services.nginx.virtualHosts = {
+    "mta-sts.rory.gay" = {
+      enableACME = !config.virtualisation.isVmVariant;
+      forceSSL = !config.virtualisation.isVmVariant;
+      locations = {
+        "/.well-known/mta-sts.txt" = {
+          # age 604800
+          return = ''
+            200 "version: STSv1
+                 mode: enforce
+                 max_age: 120
+                 mx: mail.rory.gay
+                 "'';
+        };
+      };
+    };
+    "mail.rory.gay" = {
+      enableACME = !config.virtualisation.isVmVariant;
+      forceSSL = !config.virtualisation.isVmVariant;
+      locations = {
+        "/".return = "200 'OK'";
+      };
+    };
+    "autoconfig.rory.gay" = {
+      enableACME = !config.virtualisation.isVmVariant;
+      forceSSL = !config.virtualisation.isVmVariant;
+      locations."/".proxyPass = "http://localhost:1323";
+    };
+  };
+}