vinzenz/nixos-configuration
0
0
Fork 0
mirror of https://github.com/kaesaecracker/nixos-configuration.git synced 2025-01-18 18:40:14 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

WIP route traffic from vpn1 to other nodes

Browse source
This commit is contained in:
Vinzenz Schroeter 2024-03-02 12:09:21 +01:00
parent 07a9c7a7f7
commit 4f1138c9e3
1 changed files with 55 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

55
hetzner-vpn1.nix
View file

@ -19,5 +19,60 @@
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO1CRn4yYTL4XUdCebE8Z4ZeuMujBjorTdWifg911EOv vinzenz-pc2 home roaming'' ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO1CRn4yYTL4XUdCebE8Z4ZeuMujBjorTdWifg911EOv vinzenz-pc2 home roaming''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPDNpLDmctyqGpow/ElQvdhY4BLBPS/sigDJ1QEcC7wC vinzenz-lpt2-roaming'' ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPDNpLDmctyqGpow/ElQvdhY4BLBPS/sigDJ1QEcC7wC vinzenz-lpt2-roaming''
]; ];
security.acme = {
acceptTerms = true;
defaults.email = "acme@zerforschen.plus";
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
virtualHosts = {
"vscode.services.zerforschen.plus" = {
addSSL = true;
enableACME = true;
locations."/" = {
extraConfig = ''
#proxy_set_header Host vinzenz-lpt2.donkey-pentatonic.ts.net;
proxy_ssl_verify = false;
'';
proxyPass = "https://vinzenz-lpt2.donkey-pentatonic.ts.net:8542/";
proxyWebsockets = true;
};
};
"preon-app.services.zerforschen.plus" = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000/";
};
};
"preon-api.services.zerforschen.plus" = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3002/";
};
};
};
};
networking.firewall = {
checkReversePath = "loose";
allowedTCPPortRanges = [
{
from = 5000;
to = 5005;
}
];
allowedTCPPorts = [80 443];
};
}; };
} }