fix: cleanup flake and repo

README.md

@@ -4,6 +4,8 @@ Personal site for Jet Pham.
 
 The site is a small Vite app with a terminal-style UI, ANSI-rendered text, and a WebGL2 Conway's Game of Life background.
 
+It also ships as a Nix flake with a reusable NixOS module for serving the static frontend and the Q+A API on a host.
+
 ## Features
 
 - ASCII/ANSI-inspired visual style with the IBM VGA font
@@ -53,9 +55,39 @@ npm run build
 ## Structure
 
 ```text
+api/        Q+A backend
+module.nix  NixOS module
 src/        frontend app
 ```
 
+## NixOS module
+
+Import the module from the flake and point it at the host-managed secret files you want to use.
+
+```nix
+{
+  inputs.website.url = "github:jetpham/website";
+
+  outputs = { self, nixpkgs, website, ... }: {
+    nixosConfigurations.my-host = nixpkgs.lib.nixosSystem {
+      system = "x86_64-linux";
+      modules = [
+        website.nixosModules.default
+        ({ config, ... }: {
+          services.jetpham-website = {
+            enable = true;
+            domain = "jetpham.com";
+            webhookSecretFile = config.age.secrets.webhook-secret.path;
+          };
+        })
+      ];
+    };
+  };
+}
+```
+
+Optional Tor support is configured by setting `services.jetpham-website.tor.enable = true;` and providing the three onion key file paths.
+
 ## Notes
 
 - The homepage and Q+A page are the intended public pages.