tadpole: Add whib-frontend service

hosts/tadpole/modules/default.nix

@@ -23,6 +23,7 @@ in
 
       pppdotpm-site.enable = true;
       whib-backend.enable = true;
+      whib-frontend.enable = true;
     };
   };
 }

hosts/tadpole/modules/whib/default.nix

@@ -4,24 +4,29 @@
   ...
 }:
 let
-  enabled = config.mod.whib-backend.enable;
+  backendEnabled = config.mod.whib-backend.enable;
+  frontendEnabled = config.mod.whib-frontend.enable;
 in
 {
   options = {
     mod.whib-backend = {
       enable = lib.mkEnableOption "enable WHIB backend";
     };
+
+    mod.whib-frontend = {
+      enable = lib.mkEnableOption "enable WHIB frontend";
+    };
   };
 
-  config = lib.mkIf enabled {
-    assertions = [
+  config = {
+    assertions = lib.mkIf backendEnabled [
       {
         assertion = config.services.nginx.enable;
         message = "Option 'config.services.nginx' must be enabled";
       }
     ];
 
-    services.whib-backend = {
+    services.whib-backend = lib.mkIf backendEnabled {
       enable = true;
 
       backend = {
@@ -50,6 +55,14 @@ in
       };
     };
 
+    services.whib-frontend = lib.mkIf frontendEnabled {
+      enable = true;
+
+      domain = "whib.ppp.pm";
+      useACMEHost = "whib.ppp.pm";
+      backendHost = "api.whib.ppp.pm";
+    };
+
     age.secrets = {
       "whib-backend-env-vars".file = ../../../../secrets/tadpole/whib-backend-env-vars.age;
       "whib-postgres-env-vars".file = ../../../../secrets/tadpole/whib-postgres-env-vars.age;