vinzenz/nixos-configuration
0
0
Fork 0
mirror of https://github.com/kaesaecracker/nixos-configuration.git synced 2025-01-18 18:40:14 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

dry services config

Browse source
This commit is contained in:
Vinzenz Schroeter 2024-03-02 13:46:13 +01:00
parent 2a0f184fac
commit 84657bb2a8
1 changed files with 27 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

58
hetzner-vpn1.nix
View file

@ -1,4 +1,24 @@
{pkgs, ...}: {
{
pkgs,
lib,
...
}: let
servicesDomain = "services.zerforschen.plus";
mkServiceConfig = port: {
addSSL = true;
enableACME = true;
locations."/" = {
extraConfig = ''
# bind to tailscale ip
proxy_bind 100.88.118.60;
# pam auth
auth_pam "Password Required";
auth_pam_service_name "nginx";
'';
proxyPass = "http://vinzenz-lpt2.donkey-pentatonic.ts.net:${toString port}/";
};
};
in {
imports = [
(import ./modules {
hostName = "hetzner-vpn1";
@ -39,36 +59,12 @@
recommendedOptimisation = true;
virtualHosts = {
"vscode.services.zerforschen.plus" = {
addSSL = true;
enableACME = true;
locations."/" = {
extraConfig = ''
# bind to tailscale ip
proxy_bind 100.88.118.60;
auth_pam "Password Required";
auth_pam_service_name "nginx";
'';
proxyPass = "http://vinzenz-lpt2:8542/"; #tailscale magic dns
proxyWebsockets = true;
};
};
"preon-app.services.zerforschen.plus" = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000/";
};
};
"preon-api.services.zerforschen.plus" = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3002/";
};
};
"preon-app.${servicesDomain}" = mkServiceConfig 8541;
"preon-api.${servicesDomain}" = mkServiceConfig 8542;
"vscode.${servicesDomain}" = lib.mkMerge [
(mkServiceConfig 8543)
{locations."/" .proxyWebsockets = true;}
];
};
};