bunch of outstanding changes + add MTL-aas

common/mtl-aas.nix

@@ -0,0 +1,39 @@
+# Example configuration:
+#  host: deemz.org
+#  refineryBaseUrl: /refinery
+
+{ config, pkgs, mtlAasHost, mtlAasBaseUrl, ... }:
+{
+  # reverse proxy
+  services.nginx = {
+    enable = true;
+
+    virtualHosts.${mtlAasHost} = {
+      locations."${mtlAasBaseUrl}/" = {
+        proxyPass = "http://127.0.0.1:15478/";
+        extraConfig = ''
+          charset UTF-8;
+          more_set_headers 'Server: NIXOS';
+        '';
+      };
+
+      serverName = mtlAasHost;
+    };
+  };
+
+  # run refinery container as a systemd service
+  systemd.services.mtl-aas = {
+    script = ''
+      ${mtl-aas}/bin/run_server
+    '';
+    serviceConfig = {
+      Type = "exec";
+      User = "mtl-aas";
+    };
+  };
+  users.users.mtl-aas = {
+    isSystemUser = true;
+    group = "mtl-aas";
+  };
+  users.groups.mtl-aas = {};
+}