From 58dd4440eaf6be9d260809b9dcb361d1f46f2abb Mon Sep 17 00:00:00 2001
From: Irene Knapp <ireneista@internetsafetylabs.org>
Date: Thu, 31 Jul 2025 15:25:21 -0700
Subject: try to spin up haproxy, nginx, and an ACME client

no login/ACL stuff yet

Change-Id: If6eeaed671b2711dc809e94ea00bc6387dcae2f4
---
 services/frontend/common.nix | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 services/frontend/common.nix

(limited to 'services/frontend/common.nix')

diff --git a/services/frontend/common.nix b/services/frontend/common.nix
new file mode 100644
index 0000000..78056de
--- /dev/null
+++ b/services/frontend/common.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  users.groups = {
+    "frontend" = { };
+  };
+}
-- 
cgit 1.4.1