dmz: services: nginx: add recommendedSettings and fix Hydra

This commit is contained in:
Kabbone 2024-06-04 21:06:44 +02:00
parent d7c142e2ab
commit 6b5f86c9ab
Signed by: Kabbone
SSH Key Fingerprint: SHA256:A5zPB5I6u5V78V51c362BBdCwhDhfDUVbt7NfKdjWBY

View File

@ -18,6 +18,10 @@
}; };
nginx = { nginx = {
enable = true; enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
virtualHosts = { virtualHosts = {
"home.opel-online.de" = { "home.opel-online.de" = {
enableACME = true; enableACME = true;
@ -28,7 +32,12 @@
"hydra.home.opel-online.de" = { "hydra.home.opel-online.de" = {
useACMEHost = "home.opel-online.de"; useACMEHost = "home.opel-online.de";
forceSSL = true; forceSSL = true;
locations."/".proxyPass = "http://localhost:3000"; locations."/" = {
proxyPass = "http://localhost:3000";
extraConfig = ''
proxy_set_header X-Forwarded-Port 443;
'';
};
}; };
"cache.home.opel-online.de" = { "cache.home.opel-online.de" = {
useACMEHost = "home.opel-online.de"; useACMEHost = "home.opel-online.de";