From 98c3c807c42bc0ae842775d23bdeb1ffbb431de1 Mon Sep 17 00:00:00 2001
From: stuebinm <stuebinm@disroot.org>
Date: Tue, 27 Apr 2021 10:10:17 +0200
Subject: [PATCH] shortcut domains for services

as per Zauberberg's idea in mattermost last night [1], this adds an
extra domain, which just exists to make links to the various services
shorter, using a nix to keep the whole thing easily changable.

In particular, the "shortdomain" binding should be set to some domain we
actually own before anyone deploys this (I've set it to "i4f.de" as a
dummy value for now).

Potential caveats:
 - this uses ACME to get a certificate for each of the redirect domains,
   which may run into rate limits if we have too many of them.
 - there's nothing on the shortdomain itself. I suggest we could either
   use it as a general linkshortener, or generate a list of available
   domain shortcuts into html from nix

[1] https://mattermost.infra4future.de/hacc/pl/xks5naezcbn8myh79bq3dehmso
---
 hosts/parsons/configuration.nix |  1 +
 services/shortdomains.nix       | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 services/shortdomains.nix

diff --git a/hosts/parsons/configuration.nix b/hosts/parsons/configuration.nix
index fb75f26..0051054 100644
--- a/hosts/parsons/configuration.nix
+++ b/hosts/parsons/configuration.nix
@@ -22,6 +22,7 @@
     ../../services/unifi.nix
     ../../services/lantifa.nix
     ../../services/vaultwarden.nix
+    ../../services/shortdomains.nix
 
     ./lxc.nix
   ];
diff --git a/services/shortdomains.nix b/services/shortdomains.nix
new file mode 100644
index 0000000..2f24d8c
--- /dev/null
+++ b/services/shortdomains.nix
@@ -0,0 +1,19 @@
+{ config, lib, pkgs, ... }:
+
+let
+  shortdomain = "i4f.de";
+  short = abbrv: target: {
+    name = "${abbrv}.${shortdomain}";
+    value = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/".return = "301 https://${target}$request_uri";
+    };
+  };
+in
+{
+  services.nginx.virtualHosts = lib.listToAttrs [
+    (short "d" "discuss.infra4future.de")
+    (short "m" "mattermost.infra4future.de")
+  ];
+}