sombrero: Add ppp.pm-site

hosts/sombrero/configuration.nix

@@ -86,6 +86,7 @@
     calibre-web.enable = true;
     transmission.enable = true;
     restic.enable = true;
+    pppdotpm-site.enable = true;
   };
 
   # Copy the NixOS configuration file and link it from the resulting system

hosts/sombrero/modules/ppp.pm-site/default.nix

@@ -0,0 +1,31 @@
+{ lib, config, ... }:
+let
+  enabled = config.mod.pppdotpm-site.enable;
+
+  nginxEnabled = config.mod.nginx.enable;
+in
+{
+  options = {
+    mod.pppdotpm-site = {
+      enable = lib.mkEnableOption "enable ppp.pm site";
+    };
+  };
+
+  config = {
+    security.acme = lib.mkIf (enabled && nginxEnabled) {
+      certs = {
+        "ppp.pm" = {
+          webroot = "/var/lib/acme/acme-challenge/";
+          email = "p@ppp.pm";
+          group = "nginx";
+        };
+      };
+    };
+
+    services.pppdotpm-site = {
+      enable = true;
+      domain = "ppp.pm";
+      useACMEHost = "ppp.pm";
+    };
+  };
+}