@@ -0,0 +46,4 @@
+# # Hosting
+# download.mathebau.de Hosting
+# theateraufnahmen.mathebau.de
+#

@@ -0,0 +30,4 @@
+    fsType = "ext4";
+  };
+  # nix puts the caching folder under /var/cache/nginx
+  fileSystems."/var/cache/nginx" = {

@@ -0,0 +1,211 @@
+# All our domains fall in one or more of three categories
+# proxyPass, basically handle the tls and pass the http traffick on

@@ -0,0 +23,4 @@
+          # notice that nix will also parse this string and we need to escape \
+          # so after nix processing "~ /\.git/" will end up in the nginx config,
+          # with the proper regex escape.
+          # I find this behaiviour unexpected and a bit weird, but it catches some footguns

@@ -0,0 +41,4 @@
+        }
+        // virtualHostConfig.locations;
+    }
+    // virtualHostConfig;

@@ -0,0 +57,4 @@
+    cacheHelper = targetData:
+      proxyHelper targetData
+      // {
+        extraConfig = ''

@@ -0,0 +174,4 @@
+    };
+    # TODO: we need to rebuild this for dns challenges,
+    # this does not work with our proxy pass challenge hand through things.
+    security.acme = {