hainich: init ghost A20

hosts/hainich/configuration.nix

@@ -12,7 +12,8 @@
 #   ./wireguard.nix
     ./services/nginx.nix
 #   ./k8s.nix
-    ./services/docker.nix
+    ./services/ghost_waszumfff.nix
+    ./services/ghost_A20.nix
     ./services/gitlab-runner.nix
     ./services/lantifa.nix
     ./services/syncthing.nix

hosts/hainich/services/ghost_A20.nix

@@ -0,0 +1,32 @@
+{ config, lib, pkgs, ... }:
+
+{
+  virtualisation.oci-containers.containers."ghost-A20" = {
+    autoStart = true;
+    environment = {
+      url = "https://A20.4future.dev";
+    };
+    image = "ghost:alpine";
+    ports = [ "127.0.0.1:2369:2368" ];
+    volumes = [ "/run/A20:/var/lib/ghost/content" ];
+  };
+
+  fileSystems."/run/A20" =
+    { device = "dpool/k8s/A20";
+      fsType = "zfs";
+    };
+
+  services.nginx.virtualHosts."A20.4future.dev" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:2369";
+      extraConfig = "
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Host $http_host;
+      ";
+    };
+  };
+}