redmine migration

hosts/redmine/default.nix

@@ -1,34 +1,60 @@
 {
   config,
-  lib,
   pkgs,
+  lib,
+  modulesPath,
   ...
 }:
+
 {
+
   imports = [
-    ./hardware-configuration.nix
+    "${modulesPath}/virtualisation/proxmox-lxc.nix"
   ];
+  system.stateVersion = "22.11";
 
-  networking.hostName = "redmine";
-  networking.domain = "test.htw.stura-dresden.de";
-  networking.interfaces.ens18.ipv4.addresses = [
-    {
-      address = "141.56.51.1235";
-      prefixLength = 24;
-    }
-  ];
-  networking.defaultGateway.address = "141.56.51.254";
-
-  security.acme.acceptTerms = true;
-  security.acme.defaults.email = "cert@stura.htw-dresden.de";
-
-  networking.firewall.allowedTCPPorts = [
-    25
-    80
-    443
-    597
-  ];
-
-  system.stateVersion = "24.11";
+  networking = {
+    hostName = "pro";
+    domain = "htw.stura-dresden.de";
+    firewall.allowedTCPPorts = [
+      80
+      443
+    ];
+  };
 
+  services = {
+    redmine = {
+      enable = true;
+      components.imagemagick = true;
+      components.minimagick_font_path = "${pkgs.liberation_ttf.outPath}/share/fonts/truetype/LiberationSans-Regular.ttf";
+      components.ghostscript = true;
+      settings.production.email_delivery = {
+        delivery_method = ":smtp";
+        smtp_settings = {
+          address = "mail.${config.networking.domain}";
+          port = 25;
+        };
+      };
+    };
+    nginx = {
+      enable = true;
+      logError = "/dev/null emerg";
+      appendHttpConfig = ''
+        access_log off;
+      '';
+      recommendedOptimisation = true;
+      recommendedGzipSettings = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+      virtualHosts = {
+        "pro.htw.stura-dresden.de" = {
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:${toString config.services.redmine.port}";
+          };
+          forceSSL = true;
+          enableACME = true;
+        };
+      };
+    };
+  };
 }