From 75d460e9fc10bbcdf7371b29c4fda5775c238e80 Mon Sep 17 00:00:00 2001 From: Julius de Jeu Date: Mon, 23 May 2022 21:46:53 +0200 Subject: [PATCH] new ingress time! --- nixos/machines/nginx/default.nix | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/nixos/machines/nginx/default.nix b/nixos/machines/nginx/default.nix index 2331d91..49a3bfe 100644 --- a/nixos/machines/nginx/default.nix +++ b/nixos/machines/nginx/default.nix @@ -4,7 +4,6 @@ let forceSSL = true; enableACME = true; - http2 = true; locations."/" = { proxyPass = path; proxyWebsockets = true; @@ -13,7 +12,6 @@ let bigProxy = path: { forceSSL = true; enableACME = true; - http2 = true; locations."/" = { proxyPass = path; proxyWebsockets = true; @@ -32,14 +30,13 @@ in { networking.firewall.allowedTCPPorts = [ 80 443 ]; services.nginx = { enable = true; - recommendedGzipSettings = true; recommendedOptimisation = true; recommendedProxySettings = true; recommendedTlsSettings = true; package = pkgs.nginxMainline; + virtualHosts."asraphiel.dev" = { forceSSL = true; - http2 = true; enableACME = true; root = "/etc/main"; }; @@ -48,10 +45,12 @@ in { virtualHosts."s3.asraphiel.dev" = bigProxy "http://minio.lxd:9000/"; virtualHosts."shell.s3.asraphiel.dev" = proxy "http://minio.lxd:9001/"; virtualHosts."registry.asraphiel.dev" = proxy "http://registry.lxd:5000/"; - virtualHosts."vaultwarden.asraphiel.dev" = proxy "http://vaultwarden.lxd:8000/"; + virtualHosts."vaultwarden.asraphiel.dev" = + proxy "http://vaultwarden.lxd:8000/"; virtualHosts."whoami.asraphiel.dev" = k8sProxy; virtualHosts."auth.asraphiel.dev" = k8sProxy; }; + security.acme.email = "acme@voidcorp.nl"; security.acme.acceptTerms = true; environment.etc."main/index.html" = {