From 8ce73b3b23500cf73cdf3de40c96dcbf83224ecd Mon Sep 17 00:00:00 2001
From: toufic ar <contact@toufy.me>
Date: Fri, 15 May 2026 05:46:30 +0300
Subject: enable msci webUI

---
 aphrodite/devops/msci.nix | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

(limited to 'aphrodite/devops')

diff --git a/aphrodite/devops/msci.nix b/aphrodite/devops/msci.nix
index a37fdf7..489a986 100644
--- a/aphrodite/devops/msci.nix
+++ b/aphrodite/devops/msci.nix
@@ -1,8 +1,23 @@
-{
+{config, ...}: let
+  buildDomain = "build.${config.customOps.domain.fqdn}";
+in {
   sops.secrets = {
     "msci/taur/sshkey" = {};
     "msci/taur/gpgkey" = {};
     "msci/taur/gpgpwd" = {};
   };
-  makeshiftci.enable = true;
+  makeshiftci = {
+    enable = true;
+    webUI.enable = true;
+  };
+  services.nginx.virtualHosts.${buildDomain} = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${builtins.toString config.makeshiftci.webUI.port}";
+      extraConfig = ''
+        proxy_buffering off;
+      '';
+    };
+  };
 }
-- 
cgit v1.2.3