networkException/katzen-cafe
1
0
Fork 0
forked from katzen-cafe/katzen-cafe
Code Pull requests Activity

fix acme and jitsi stuff

Browse source
This commit is contained in:
Schrottkatze 2023-07-30 18:19:44 +02:00
parent 3b666eee63
commit 02a6440717
4 changed files with 21 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

22
modules/proxy.nix
View file

@ -35,10 +35,10 @@
group = "nginx";
keyType = "rsa4096";
};
# "mumble.katzen.cafe" = {
# group = "murmur";
# keyType = "rsa4096";
# };
"mumble.katzen.cafe" = {
group = "murmur";
keyType = "rsa4096";
};
"hc-vault.katzen.cafe" = {
group = "nginx";
keyType = "rsa4096";
@ -57,6 +57,8 @@
# };
};
};
users.users.nginx.extraGroups = [ "acme" ];
services.nginx = {
enable = true;
@ -68,6 +70,16 @@
statusPage = true;
virtualHosts = {
"_.katzen.cafe" = {
# Catchall vhost, will redirect users to HTTPS for all vhosts
serverAliases = [ "*.katzen.cafe" ];
locations."/.well-known/acme-challenge" = {
root = "/var/lib/acme/acme-challenge";
};
locations."/" = {
return = "301 https://$host$request_uri";
};
};
"grafana.katzen.cafe" = {
forceSSL = true;
enableACME = true;
@ -102,7 +114,7 @@
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8080";
proxyPass = "http://127.0.0.3:8080";
# proxy_set_header Host $host;
extraConfig = ''
proxy_buffers 4 256k;