j00lz/strato-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

new ingress time!

Browse source
This commit is contained in:
Julius 2022-05-23 21:46:53 +02:00
parent eb6264fab9
commit 75d460e9fc
Signed by: j00lz
GPG key ID: AF241B0AA237BBA2
1 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
nixos/machines/nginx/default.nix
View file

@ -4,7 +4,6 @@ let
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
http2 = true;
locations."/" = { locations."/" = {
proxyPass = path; proxyPass = path;
proxyWebsockets = true; proxyWebsockets = true;
@ -13,7 +12,6 @@ let
bigProxy = path: { bigProxy = path: {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
http2 = true;
locations."/" = { locations."/" = {
proxyPass = path; proxyPass = path;
proxyWebsockets = true; proxyWebsockets = true;
@ -32,14 +30,13 @@ in {
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
package = pkgs.nginxMainline; package = pkgs.nginxMainline;
virtualHosts."asraphiel.dev" = { virtualHosts."asraphiel.dev" = {
forceSSL = true; forceSSL = true;
http2 = true;
enableACME = true; enableACME = true;
root = "/etc/main"; root = "/etc/main";
}; };
@ -48,10 +45,12 @@ in {
virtualHosts."s3.asraphiel.dev" = bigProxy "http://minio.lxd:9000/"; virtualHosts."s3.asraphiel.dev" = bigProxy "http://minio.lxd:9000/";
virtualHosts."shell.s3.asraphiel.dev" = proxy "http://minio.lxd:9001/"; virtualHosts."shell.s3.asraphiel.dev" = proxy "http://minio.lxd:9001/";
virtualHosts."registry.asraphiel.dev" = proxy "http://registry.lxd:5000/"; virtualHosts."registry.asraphiel.dev" = proxy "http://registry.lxd:5000/";
virtualHosts."vaultwarden.asraphiel.dev" = proxy "http://vaultwarden.lxd:8000/"; virtualHosts."vaultwarden.asraphiel.dev" =
proxy "http://vaultwarden.lxd:8000/";
virtualHosts."whoami.asraphiel.dev" = k8sProxy; virtualHosts."whoami.asraphiel.dev" = k8sProxy;
virtualHosts."auth.asraphiel.dev" = k8sProxy; virtualHosts."auth.asraphiel.dev" = k8sProxy;
}; };
security.acme.email = "acme@voidcorp.nl"; security.acme.email = "acme@voidcorp.nl";
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
environment.etc."main/index.html" = { environment.etc."main/index.html" = {