_module.args bad

profiles/http/default.nix

@@ -1,17 +1,25 @@
 { config, pkgs, lib, ... }:
 let
-  mkDomain = subname: "${subname}.${config.networking.fqdn}";
+  inherit (config.pbsds.nginx) mkDomain allSubdomains;
 in
 {
-  # TODO: make these into nixos options with readonly=true
-  _module.args.mkDomain = mkDomain;
-  _module.args.allSubdomains = lib.pipe config.services.nginx.virtualHosts [
+  options.pbsds.nginx.mkDomain = lib.mkOption {
+    visible = false; internal = true; readOnly = true;
+    default = subname: "${subname}.${config.networking.fqdn}";
+  };
+  options.pbsds.nginx.allSubdomains = lib.mkOption {
+    visible = false; internal = true; readOnly = true;
+    default = lib.pipe config.services.nginx.virtualHosts [
       #(lib.mapAttrsToList (domain: vhost: [ domain ] ++ vhost.serverAliases))
       (lib.mapAttrsToList (domain: vhost: [ domain ]))
       lib.flatten
       (builtins.filter (domain: domain != "" && domain != "_"))
       (lib.sort (x: y: x<y))
     ];
+  };
+
+
+  config = {
 
     security.acme.acceptTerms = true;
     security.acme.defaults.email = "pbsds+acme@hotmail.com"; # TODO: parametrize per host
@@ -107,5 +115,5 @@ in
     #};
     /**/
 
-
+  };
 }

profiles/http/docs/default.nix

@@ -1,6 +1,8 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
 
 let
+  inherit (config.pbsds.nginx) mkDomain;
+
   cfg = config.services.docs-to-host;
 
   # https://pagefind.app/docs/ui-usage/

profiles/http/index/default.nix

@@ -1,5 +1,7 @@
-{ config, pkgs, lib, mkDomain, allSubdomains, ... }:
+{ config, pkgs, lib, ... }:
 let
+  inherit (config.pbsds.nginx) mkDomain allSubdomains;
+
   # TODO: support fully qualified urls as well
   # `null` means filter
   customDescriptions = rec {

profiles/http/services/attic.nix

@@ -1,4 +1,8 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 
 # attic - multi-tenant nix binary cache
 # https://docs.attic.rs/tutorial.html

profiles/http/services/censordodge.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # CensorDodge
   # A lightweight and customisable web proxy

profiles/http/services/cinny.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 
 lib.mkIf pkgs.unstable.cinny.meta.available # no CVE's thank you
 

profiles/http/services/convos.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Convos
   # The simplest way to use IRC in your browser

profiles/http/services/cryptpad.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
 
   # Cryptpad

profiles/http/services/element.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Element-web
   # A glossy Matrix collaboration client for the web

profiles/http/services/flexget.nix

@@ -3,7 +3,7 @@ let
   cfg = config.services.flexget;
 in
 
-# TODO: run in VM mode if we run transmission in the same VM
+# TODO: run in build-vm mode if we run transmission in the same machine
 lib.mkIf (!config.virtualisation.isVmVariant)
 
 {

profiles/http/services/galene.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Galene
   # Videoconferencing server that is easy to deploy, written in Go

profiles/http/services/gitea.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Gitea
   # Git with a cup of tea

profiles/http/services/graphana.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Graphana
   # Gorgeous metric viz, dashboards & editors for Graphite, InfluxDB & OpenTSDB

profiles/http/services/hedgedoc.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
     # hedgedoc
     # Realtime collaborative markdown notes on all platforms

profiles/http/services/home-assistant.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
 
   # home-assistant

profiles/http/services/hydra.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Hydra
   # Nix-based continuous build system

profiles/http/services/invidious.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, inputs, mkDomain, ... }:
+{ config, pkgs, lib, inputs, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Invidious
   # An open source alternative front-end to YouTube

profiles/http/services/jellyfin.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, inputs, mkDomain, ... }:
+{ config, pkgs, lib, inputs, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 
 # don't mount if local VM
 lib.mkIf (!config.virtualisation.isVmVariant)

profiles/http/services/jitsi-meet.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Jitsi meet
 

profiles/http/services/kukkee.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Kukkee
   # Self-hosted Doodle alternative: a meeting poll tool

profiles/http/services/matrix-synapse.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # matrix-synapse
   /**/

profiles/http/services/mattermost.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Mattermost
   # Open-source, self-hosted Slack-alternative

profiles/http/services/navidrome.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 
 # don't mount if local VM
 lib.mkIf (!config.virtualisation.isVmVariant)

profiles/http/services/netdata.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Netdata
   # Real-time performance monitoring tool

profiles/http/services/nitter.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Nitter
   # Alternative Twitter front-end

profiles/http/services/ntopng.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # ntopng
   # High-speed web-based traffic analysis and flow collection tool

profiles/http/services/openspeedtest.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # OpenSpeedtTest
   # Pure HTML5 Network Performance Estimation Tool

profiles/http/services/owncast.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
 
   # OwnCast

profiles/http/services/paperless.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # paperless-ngx
   # A supercharged version of paperless: scan, index, and archive all of your physical documents

profiles/http/services/plex.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, inputs, mkDomain, ... }:
+{ config, pkgs, lib, inputs, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 
 # don't mount if local VM
 lib.mkIf (!config.virtualisation.isVmVariant)

profiles/http/services/polaris.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Polaris
   # Self-host your music collection, and access it from any computer and mobile device

profiles/http/services/redlib.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # redlib, previously libreddit
   # Private front-end for Reddit

profiles/http/services/resilio.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 
 # don't mount if local VM
 lib.mkIf (!config.virtualisation.isVmVariant)

profiles/http/services/roundcube.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Roundcube
   # Open Source Webmail Software

profiles/http/services/shlink.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Shlink
   # URL shortener with REST API and command line interface

profiles/http/services/snappymail.nix

@@ -1,7 +1,8 @@
 # adapted from https://github.com/samrose/dotfiles-1/blob/8887ca3b01edecd83c2e95f01e42885ce26f76c5/nixos/eve/modules/snappymail.nix#L55
-{ pkgs, config, lib, mkDomain, ... }:
-
+{ pkgs, config, lib, ... }:
 let
+  inherit (config.pbsds.nginx) mkDomain;
+
   maxUploadSize = "256M";
   toKeyValue = lib.generators.toKeyValue {
     mkKeyValue = lib.generators.mkKeyValueDefault {} " = ";

profiles/http/services/sourcegraph.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # Sourcegraph
   # Understand, fix, and automate across your codebase with this code intelligence platform

profiles/http/services/stickers.nix

@@ -1,6 +1,9 @@
-{ config, lib, mkDomain, inputs, ... }:
+{ config, lib, inputs, ... }:
 
 let
+
+  inherit (config.pbsds.nginx) mkDomain;
+
   myStickerPicker = inputs.maunium-stickerpicker-nix.createStickerPicker {
     #homeserver = "https://matrix.pvv.ntnu.no";
     #userId = "@stickerbot:my.matrix.server";

profiles/http/services/tautulli.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, inputs, mkDomain, ... }:
+{ config, pkgs, lib, inputs, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
 
   # plex admin web ui

profiles/http/services/thelounge.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # thelunge
   # The self-hosted Web IRC client

profiles/http/services/trivial-gradios/default.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # trivial gradios
 

profiles/http/services/vaultwarden.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # vaultwarden
   # Unofficial Bitwarden compatible server written in Rust

profiles/http/services/webdav-zotero.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
 
   # webdav

profiles/http/sites/kuklefse.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   services.nginx.virtualHosts."kuklef.se" = {
     forceSSL = true; # addSSL = true;

profiles/http/sites/linktree-pbsds.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, mkDomain, ... }:
+{ config, pkgs, lib, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # links.pbsds.net
 

profiles/http/sites/refleksjon-no.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, inputs, mkDomain, ... }:
+{ config, pkgs, lib, inputs, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # refleksjon.no
 

profiles/http/sites/roroslyd-no.nix

@@ -1,4 +1,7 @@
-{ config, pkgs, lib, inputs, mkDomain, ... }:
+{ config, pkgs, lib, inputs, ... }:
+let
+  inherit (config.pbsds.nginx) mkDomain;
+in
 {
   # roroslyd.no