flake.lock

@@ -327,7 +327,8 @@
         "nixpkgs-unstable": "nixpkgs-unstable",
         "nur": "nur",
         "pre-commit-hooks": "pre-commit-hooks",
-        "systems": "systems"
+        "systems": "systems",
+        "website": "website"
       }
     },
     "systems": {
@@ -345,6 +346,22 @@
         "repo": "default",
         "type": "github"
       }
+    },
+    "website": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1709301176,
+        "narHash": "sha256-HOnDLwHnVt6G+Gop08PYbzNDahq9SKHnPdaR5hdL244=",
+        "owner": "buffet",
+        "repo": "website",
+        "rev": "473559837586715998be89b928131706c5058f96",
+        "type": "github"
+      },
+      "original": {
+        "owner": "buffet",
+        "repo": "website",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -72,6 +72,11 @@
       url = "github:nix-systems/default";
       flake = false;
     };
+
+    website = {
+      url = "github:buffet/website";
+      flake = false;
+    };
   };
 
   outputs = {
@@ -115,5 +120,10 @@
           };
         };
       };
+
+      devShell = nixpkgs.legacyPackages.${system}.mkShell {
+        inherit (self.checks.${system}.pre-commit-check) shellHook;
+        buildInputs = self.checks.${system}.pre-commit-check.enabledPackages;
+      };
     });
 }

hosts/ami/404.nix

@@ -4,7 +4,7 @@
       default = true;
       useACMEHost = "buffet.sh";
       forceSSL = true;
-      extraConfig = "return 404;";
+      root = "${website}/404.html";
     };
   };
 }

hosts/ami/default.nix

@@ -19,6 +19,7 @@
     ./murmur.nix
     ./nginx.nix
     ./upgrade.nix
+    ./website.nix
 
     ../../users/maintainer
   ];

hosts/ami/nginx.nix

@@ -1,6 +1,4 @@
 {
-  networking.firewall.allowedTCPPorts = [80 443];
-
   services.nginx = {
     enable = true;
 

hosts/ami/website.nix

@@ -0,0 +1,11 @@
+{website, ...}: {
+  networking.firewall.allowedTCPPorts = [80 443];
+
+  services.nginx = {
+    virtualHosts."buffet.sh" = {
+      useACMEHost = "buffet.sh";
+      forceSSL = true;
+      root = "${website}";
+    };
+  };
+}