knot: bind -> knot

config/default.nix

@@ -134,6 +134,9 @@
     useHostResolvConf = lib.mkIf (!config.services.resolved.enable) true;
   };
 
+  # TODO: drop when https://github.com/Mic92/sops-nix/pull/555 is merged
+  sops.environment.SOPS_GPG_EXEC = lib.getExe (pkgs.gnupg.override { enableMinimal = true; });
+
   nix = {
     deleteChannels = true;
     deleteUserProfiles = true;

hosts/c3d2-web/default.nix

@@ -114,7 +114,7 @@
       "autotopia.c3d2.de" = {
         enableACME = true;
         forceSSL = true;
-        root = "/var/www/c3d2/autotopia";
+        locations."/".root = "/var/www/c3d2/autotopia";
         extraConfig = ''
           index index.html;
           rewrite ^/$ /2020/ redirect;

hosts/knot/secrets.yaml

@@ -2,7 +2,7 @@ knot:
     keyFile: ENC[AES256_GCM,data:AIljRkmOy8qjkJHM3er0JVJdE3iD2oFJ/hDXsrBDvQ5u2G08/eqz+e9KQoYLaSg7GU5+Io1O6ADUPlCi2g5pGz4rkLFlhLFCVTOUFgex9dkchIQ9gMELPCAm6kAMZlPnfv2UnG9EaQCtT0LpCOItpQ==,iv:d3ARHmPo/+VU/4Dmxth2ar7y1AMF0ruO/7ddqPqTsdA=,tag:F7JuHNkusL92sTgp5a1oRg==,type:str]
 ssh-keys:
     knot:
-        public: ENC[AES256_GCM,data:LxJqnVOjC7PD6Muup96Ep83/7MvhyIbE8iBB7Yxd2MkCIWZVuHhVcNgVBP9IaMs8cj4RPNq8NUJSP3AjRM0U+EDDXyRwend0GzpIERGoNEJOoqbCF1Ts9wVx4EEWrQ==,iv:RD8WYJURlTktuHP4CMo6KxS8N/H7adTt7pPttSEFuHM=,tag:e6JLyGvKJi+Nt1yP9gT2wA==,type:str]
+        public: ENC[AES256_GCM,data:HOKwyNGhZhL0cnK0R3km4nzNi2x7W2RNabfP/pyW/sa7cHe9bOscpsgYz89O47tTkWxGz5eKgr/j+mfNg/QCPLq1AZZp7BwT7WHPlFPDEGhUqxpmgkR/iWEcN/pFHw==,iv:B1WqzrnWxtrfd21QxQUEHtjzG58EdVgW18AlJGmR5a8=,tag:pqIp5yDdxqkCPi5SQ4SpVA==,type:str]
         private: ENC[AES256_GCM,data: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,iv:uwy3u/GMLBnkfRDS4LUfS7A64DWlMjY4BujPC6tZPcI=,tag:PHRZD5I9ftzce2tek/YVdQ==,type:str]
 sops:
     kms: []
@@ -28,8 +28,8 @@ sops:
             RyswT3E2Rnh2aTZMdXI0QnJRQVFNYVUKu9yv8wZ7X6mmFc3wj/4cOL9mZrP0Q6F7
             fXtdZr93TmTK9cG5EuBYuGDvOooFsPeSLSjP6BFRG+2+X+QxK7nSFg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-17T13:30:09Z"
-    mac: ENC[AES256_GCM,data:iAqigiacq2TjY+TzoxGju7tuo0eEnH8KrRrm/cMGwBzDwaCIT96JkKxva7gxqD1TUW9P5sWaM7ZEYJd6l4CDxgdJ3/ayyjABhAKR2AeMuSUaRWomauePKP2I83V5w5BIUODDtw7eHitkyZpZAm8/at+YI1OlEhWb06sDG0T1KN4=,iv:AJ/Lf9w4zxm0kJxuoCsHmTvwGslQdWqqmOuCaYOwgWc=,tag:tXtZSupLTnXYASTtDmYfLQ==,type:str]
+    lastmodified: "2024-05-05T13:44:20Z"
+    mac: ENC[AES256_GCM,data:4mKJn5LVx0TsBZNoJeEHpL6BPJ4Hg7QQ5rAAZ+S6OEjtRR/Jku7SwH0FLNNoQZK49MnLhWVqrcW9YLNSPzUCcW1KY4k0ErbnlVJ7sVeTu8IRyNBbHR0neRLxP+6d4CzZY8O0VucbtGbKgOgxxNIUZDr5TNvSJ3uTx3ARfwcy5w8=,iv:IWjhjv5BkSPd/5NXTcMlOiUSNGRbjNXQ2+LydXAe8dA=,tag:6NLnKkfvCTBq73oQjfQ4gw==,type:str]
     pgp:
         - created_at: "2023-08-08T22:43:21Z"
           enc: |

hosts/network-homepage/default.nix

@@ -14,7 +14,7 @@
       virtualHosts."www.zentralwerk.org" = {
         forceSSL = true;
         enableACME = true;
-        root = "${zentralwerk.packages.${pkgs.system}.homepage}/share/doc/zentralwerk/www";
+        locations."/".root = "${zentralwerk.packages.${pkgs.system}.homepage}/share/doc/zentralwerk/www";
       };
       virtualHosts."zentralwerk.org" = virtualHosts."www.zentralwerk.org" // {
         default = true;

hosts/scrape/default.nix

@@ -30,7 +30,7 @@ in {
       default = true;
       forceSSL = true;
       enableACME = true;
-      root = config.users.users.scrape.home;
+      locations."/".root = config.users.users.scrape.home;
       extraConfig = ''
         autoindex on;
       '';