zaphyra's git: nixfiles

config/nixos/modules/websites/music.zaphyra.dn42: add clearnet url

diff --git a/config/nixos/modules/websites/music.zaphyra.dn42.nix b/config/nixos/modules/websites/music.zaphyra.dn42.nix
@@ -30,9 +30,14 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    dns.zones."${cfg.domain}".subdomains."${cfg.subdomain}".AAAA = [
-      hostConfig.networking.dn42Address
-    ];
+    dns.zones = {
+      "${cfg.domain}".subdomains."${cfg.subdomain}".AAAA = [
+        hostConfig.networking.dn42Address
+      ];
+      "zaphyra.eu".subdomains."${cfg.subdomain}".AAAA = [
+        hostConfig.networking.ip6Address
+      ];
+    };
 
     fileSystems."/mnt/music" = {
       device = "/home/zaphyra/Music";

@@ -69,11 +74,22 @@ in
       dnsProvider = null;
     };
 
-    services.nginx.virtualHosts."${cfg.subdomain}.${cfg.domain}" = {
-      enableACME = true;
-      forceSSL = true;
-      kTLS = true;
-      locations."/".proxyPass = "http://[::1]:${toString config.services.navidrome.settings.Port}/";
+    services.nginx = {
+      enable = true;
+      virtualHosts = {
+        "${cfg.subdomain}.${cfg.domain}" = {
+          enableACME = true;
+          forceSSL = true;
+          kTLS = true;
+          locations."/".proxyPass = "http://[::1]:${toString config.services.navidrome.settings.Port}/";
+        };
+        "${cfg.subdomain}.zaphyra.eu" = {
+          useACMEHost = "${config.networking.fqdn}";
+          forceSSL = true;
+          kTLS = true;
+          locations."/".proxyPass = "http://[::1]:${toString config.services.navidrome.settings.Port}/";
+        };
+      };
     };
   };