jupiter: fix nix cache proxy
This commit is contained in:
@@ -32,8 +32,13 @@
|
|||||||
useACMEHost = "home.opel-online.de";
|
useACMEHost = "home.opel-online.de";
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
locations."/" = {
|
locations."/" = {
|
||||||
proxyPass = "https://cache.ci.kabtop.de";
|
|
||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
|
proxy_pass https://cache.ci.kabtop.de;
|
||||||
|
proxy_ssl_server_name on;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
proxy_set_header Host cache.ci.kabtop.de;
|
||||||
|
|
||||||
proxy_cache nix_cache;
|
proxy_cache nix_cache;
|
||||||
proxy_cache_valid 200 14d;
|
proxy_cache_valid 200 14d;
|
||||||
proxy_cache_valid 404 1m;
|
proxy_cache_valid 404 1m;
|
||||||
@@ -70,6 +75,8 @@
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/mnt/Pluto/nix-cache" ];
|
||||||
|
|
||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
enable = true;
|
enable = true;
|
||||||
allowedUDPPorts = [ ];
|
allowedUDPPorts = [ ];
|
||||||
|
|||||||
Reference in New Issue
Block a user