nix-configs/schrottserver/proxy.nix

72 lines
1.8 KiB
Nix
Raw Normal View History

2023-02-03 22:06:00 +00:00
{ inputs, config, pkgs, ... }:
2023-02-04 00:14:39 +00:00
{
2023-02-03 22:06:00 +00:00
security.acme = {
acceptTerms = true;
defaults.email = "jade@schrottkatze.de";
certs = {
2023-02-06 09:51:15 +00:00
"schrottkatze.de" = {
group = "nginx";
keyType = "rsa2048";
};
2023-02-04 00:14:39 +00:00
"vw.schrottkatze.de" = {
2023-02-03 22:06:00 +00:00
group = "nginx";
keyType = "rsa2048";
};
2023-02-06 09:51:15 +00:00
"wolke.schrottkatze.de" = {
group = "nginx";
2023-02-17 23:21:51 +00:00
keyType = "rsa2047";
2023-02-06 09:51:15 +00:00
};
2023-02-16 11:11:05 +00:00
"s10e.de" = {
group = "nginx";
keyType = "rsa2048";
};
2023-02-03 22:06:00 +00:00
};
};
2023-02-06 09:51:15 +00:00
environment.systemPackages = [ inputs.meowsite.packages."x86_64-linux".default ];
2023-02-03 22:06:00 +00:00
services.nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
2023-02-06 09:51:15 +00:00
"schrottkatze.de" = {
forceSSL = true;
enableACME = true;
root = "${inputs.meowsite.packages."x86_64-linux".default}";
};
2023-02-04 00:14:39 +00:00
"vw.schrottkatze.de" = {
2023-02-03 22:06:00 +00:00
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:8812"; #changed the default rocket port due to some conflict
proxyWebsockets = true;
};
locations."/notifications/hub" = {
proxyPass = "http://localhost:3012";
proxyWebsockets = true;
};
locations."/notifications/hub/negotiate" = {
proxyPass = "http://localhost:8812";
proxyWebsockets = true;
};
};
2023-02-04 00:14:39 +00:00
"wolke.schrottkatze.de" = {
forceSSL = true;
enableACME = true;
};
2023-02-16 11:11:05 +00:00
"s10e.de" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8080$request_uri";
};
};
2023-02-03 22:06:00 +00:00
};
};
}