From 793ae12d245284a99481960d8d575c84e6977867 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sascha=20K=C3=B6nig?= <sascha.koenig@azintec.com>
Date: Wed, 24 Jun 2026 19:45:41 +0200
Subject: [PATCH] + excalidraw

---
 .../AZ-PRM-1/services/containers/default.nix  |  1 +
 .../services/containers/excalidraw.nix        | 32 +++++++++++++++++++
 hosts/common/ports.nix                        |  1 +
 3 files changed, 34 insertions(+)
 create mode 100644 hosts/AZ-PRM-1/services/containers/excalidraw.nix

diff --git a/hosts/AZ-PRM-1/services/containers/default.nix b/hosts/AZ-PRM-1/services/containers/default.nix
index 84c48dd..e573e6c 100644
--- a/hosts/AZ-PRM-1/services/containers/default.nix
+++ b/hosts/AZ-PRM-1/services/containers/default.nix
@@ -1,6 +1,7 @@
 {lib, ...}: {
   imports = [
     #./baserow.nix
+    ./excalidraw.nix
     ./kestra.nix
     ./stirling-pdf.nix
   ];
diff --git a/hosts/AZ-PRM-1/services/containers/excalidraw.nix b/hosts/AZ-PRM-1/services/containers/excalidraw.nix
new file mode 100644
index 0000000..2b204ab
--- /dev/null
+++ b/hosts/AZ-PRM-1/services/containers/excalidraw.nix
@@ -0,0 +1,32 @@
+{config, ...}: let
+  serviceName = "excalidraw";
+  servicePort = config.m3ta.ports.get serviceName;
+in {
+  virtualisation.oci-containers.containers."${serviceName}" = {
+    image = "docker.io/excalidraw/excalidraw:latest";
+    cmd = [
+      "/bin/sh"
+      "-c"
+      ''
+        set -e
+        if ! grep -q "az-hide-excalidraw-plus" /usr/share/nginx/html/index.html; then
+          sed -i 's#</head>#<style id="az-hide-excalidraw-plus">.plus-banner{display:none!important}</style></head>#' /usr/share/nginx/html/index.html
+        fi
+        exec nginx -g 'daemon off;'
+      ''
+    ];
+    ports = ["127.0.0.1:${toString servicePort}:80"];
+    extraOptions = ["--ip=10.89.0.14" "--network=web"];
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.${serviceName}.loadBalancer.servers = [{url = "http://localhost:${toString servicePort}/";}];
+
+    routers.${serviceName} = {
+      rule = "Host(`draw.l.az-gruppe.com`)";
+      tls = {certResolver = "ionos";};
+      service = serviceName;
+      entrypoints = "websecure";
+    };
+  };
+}
diff --git a/hosts/common/ports.nix b/hosts/common/ports.nix
index f1d7b7a..d603623 100644
--- a/hosts/common/ports.nix
+++ b/hosts/common/ports.nix
@@ -55,6 +55,7 @@
         kestra = 5080;
         stirling-pdf = 3032;
         bpi = 3033;
+        excalidraw = 3034;
       };
     };
   };