Kabbone/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

hosts: dmz: nix-serve: add reverse proxy

Browse Source
This commit is contained in:
Kabbone 2024-05-31 20:42:16 +02:00
parent cb7412e749
commit 2b30c68a54
Signed by: Kabbone
SSH Key Fingerprint: SHA256:A5zPB5I6u5V78V51c362BBdCwhDhfDUVbt7NfKdjWBY
1 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
modules/services/dmz/hydra.nix
View File

@ -4,33 +4,40 @@
services = { services = {
hydra = { hydra = {
enable = true; enable = true;
hydraURL = "hydra.home.opel-online.de"; hydraURL = "https://hydra.home.opel-online.de";
listenHost = "localhost"; listenHost = "localhost";
notificationSender = "hydra@localhost"; notificationSender = "hydra@localhost";
useSubstitutes = true; useSubstitutes = true;
minimumDiskFree = 30;
}; };
nix-serve = { nix-serve = {
enable = true; enable = true;
port = 5001; port = 5001;
bindAddress = "127.0.0.1";
secretKeyFile = config.age.secrets."keys/nixsign".path; secretKeyFile = config.age.secrets."keys/nixsign".path;
}; };
nginx = { nginx = {
enable = true; enable = true;
virtualHosts = { virtualHosts = {
"${config.services.hydra.hydraURL}" = { "hydra.home.opel-online.de" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
locations."/".proxyPass = "http://localhost:3000"; locations."/".proxyPass = "http://localhost:3000";
}; };
"cache.home.opel-online.de" = {
enableACME = true;
forceSSL = true;
locations."/".proxyPass = "http://localhost:5001";
};
}; };
}; };
}; };
security.acme = { security.acme = {
defaults.email = "webmaster@kabtop.de";
#defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
acceptTerms = true; acceptTerms = true;
certs.${config.services.hydra.hydraURL} = { defaults = {
email = "webmaster@kabtop.de";
#defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
dnsProvider = "netcup"; dnsProvider = "netcup";
environmentFile = config.age.secrets."services/acme/opel-online".path; environmentFile = config.age.secrets."services/acme/opel-online".path;
webroot = null; webroot = null;