meteora: host on ful

systems/ful/configuration.nix

@@ -17,6 +17,7 @@
     ./wallabag.nix
     ./nethack.nix
     ./opencrow.nix
+    ./meteora.nix
   ];
 
   niveum.passport = {

systems/ful/meteora.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }: {
+  age.secrets.meteora-auth = {
+    file = ../../secrets/meteora-auth.age;
+    owner = "nginx";
+  };
+
+  services.nginx = {
+    enable = true;
+    virtualHosts."meteora.xn--kiern-0qa.de" = {
+      forceSSL = true;
+      enableACME = true;
+      root = "${pkgs.meteora-website}";
+      locations."/" = {
+        basicAuthFile = config.age.secrets.meteora-auth.path;
+      };
+    };
+  };
+}