new ingress time!

This commit is contained in:
Julius 2022-05-23 21:46:53 +02:00
parent eb6264fab9
commit 75d460e9fc
Signed by: j00lz
GPG key ID: AF241B0AA237BBA2

View file

@ -4,7 +4,6 @@ let
forceSSL = true;
enableACME = true;
http2 = true;
locations."/" = {
proxyPass = path;
proxyWebsockets = true;
@ -13,7 +12,6 @@ let
bigProxy = path: {
forceSSL = true;
enableACME = true;
http2 = true;
locations."/" = {
proxyPass = path;
proxyWebsockets = true;
@ -32,14 +30,13 @@ in {
networking.firewall.allowedTCPPorts = [ 80 443 ];
services.nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
package = pkgs.nginxMainline;
virtualHosts."asraphiel.dev" = {
forceSSL = true;
http2 = true;
enableACME = true;
root = "/etc/main";
};
@ -48,10 +45,12 @@ in {
virtualHosts."s3.asraphiel.dev" = bigProxy "http://minio.lxd:9000/";
virtualHosts."shell.s3.asraphiel.dev" = proxy "http://minio.lxd:9001/";
virtualHosts."registry.asraphiel.dev" = proxy "http://registry.lxd:5000/";
virtualHosts."vaultwarden.asraphiel.dev" = proxy "http://vaultwarden.lxd:8000/";
virtualHosts."vaultwarden.asraphiel.dev" =
proxy "http://vaultwarden.lxd:8000/";
virtualHosts."whoami.asraphiel.dev" = k8sProxy;
virtualHosts."auth.asraphiel.dev" = k8sProxy;
};
security.acme.email = "acme@voidcorp.nl";
security.acme.acceptTerms = true;
environment.etc."main/index.html" = {