feat(web/portefolio): adding the portefolio configuration to self host

services/web.nix

@@ -0,0 +1,21 @@
+{ inputs, config, pkgs, lib, ... }:
+
+let
+	portefolio = import ./web/portefolio.nix {
+		inherit inputs config pkgs lib;
+	};
+	cfg = config.service.web;
+in
+{
+	imports = [
+		portefolio
+	];
+
+	options.service.web = {
+		portefolio = lib.mkOption {
+			type = lib.types.bool;
+			default = false;
+			description = "Enable the portefolio";
+		};
+	};
+}

services/web/portefolio.nix

@@ -0,0 +1,48 @@
+{ config, pkgs, lib, ... }:
+
+let
+	cfg = config.service.web.portefolio;
+in
+{
+	config = lib.mkIf cfg {
+		environment.systemPackages = with pkgs; [
+			nodejs
+			pnpm
+		];
+		users = {
+			groups.web_portefolio = {
+				name = "web_portefolio";
+			};
+			users.web_portefolio = {
+				description = "Utilisateur pour le bot BDE";
+				group = "web_portefolio";
+				home = "/opt/portefolio/";
+				isSystemUser = true;
+			};
+		};
+
+		services.nginx = {
+			enable = true;
+			recommendedGzipSettings = true;
+			recommendedProxySettings = true;
+			virtualHosts."raphael.parodi.pro" = {
+				forceSSL   = true;
+				enableACME = true;
+				locations."/" = {
+					root       = "/opt/portefolio/dist";
+					index      = "index.html";
+					extraConfig = ''
+					try_files $uri /index.html;
+					'';
+				};
+			};
+		};
+		security.acme = {
+			acceptTerms = true;
+			email = "raphael@parodi.pro";
+			certs = {
+				"raphael.parodi.pro" = {};
+			};
+		};
+	};
+}