jupiter: fix nix cache proxy

This commit is contained in:
2026-04-25 20:29:29 +02:00
parent a33a909ff0
commit 464e99ab2c

View File

@@ -32,8 +32,13 @@
useACMEHost = "home.opel-online.de";
forceSSL = true;
locations."/" = {
proxyPass = "https://cache.ci.kabtop.de";
extraConfig = ''
proxy_pass https://cache.ci.kabtop.de;
proxy_ssl_server_name on;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host cache.ci.kabtop.de;
proxy_cache nix_cache;
proxy_cache_valid 200 14d;
proxy_cache_valid 404 1m;
@@ -70,6 +75,8 @@
};
};
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/mnt/Pluto/nix-cache" ];
networking.firewall = {
enable = true;
allowedUDPPorts = [ ];