vinzenz/nixos-configuration
0
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix brackets

Browse source
This commit is contained in:
Vinzenz Schroeter 2025-09-06 20:43:21 +02:00
parent d3555228be
commit d04005b782
1 changed files with 65 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

128
hosts/hetzner-vpn2/nginx.nix
View file

@ -22,68 +22,70 @@ in
}; };
}; };
services.nginx = { services = {
enable = true; nginx = {
additionalModules = [ pkgs.nginxModules.pam ]; enable = true;
additionalModules = [ pkgs.nginxModules.pam ];
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
virtualHosts = virtualHosts =
#let #let
# servicesDomain = "services.zerforschen.plus"; # servicesDomain = "services.zerforschen.plus";
# mkServiceConfig = # mkServiceConfig =
# { host, port }: # { host, port }:
# { # {
# addSSL = true; # addSSL = true;
# enableACME = true; # enableACME = true;
# locations."/" = { # locations."/" = {
# proxyPass = "http://${host}:${toString port}/"; # proxyPass = "http://${host}:${toString port}/";
# extraConfig = '' # extraConfig = ''
# # bind to tailscale ip # # bind to tailscale ip
# proxy_bind 100.88.118.60; # proxy_bind 100.88.118.60;
# # pam auth # # pam auth
# limit_except OPTIONS { # limit_except OPTIONS {
# auth_pam "Password Required"; # auth_pam "Password Required";
# auth_pam_service_name "nginx"; # auth_pam_service_name "nginx";
# } # }
# ''; # '';
# }; # };
# }; # };
# pc2 = "vinzenz-pc2.donkey-pentatonic.ts.net"; # pc2 = "vinzenz-pc2.donkey-pentatonic.ts.net";
#in #in
{ {
#"code.${servicesDomain}" = lib.mkMerge [ #"code.${servicesDomain}" = lib.mkMerge [
# (mkServiceConfig { # (mkServiceConfig {
# host = pc2; # host = pc2;
# port = 8542; # port = 8542;
# }) # })
# { locations."/".proxyWebsockets = true; } # { locations."/".proxyWebsockets = true; }
#]; #];
#"view.${servicesDomain}" = mkServiceConfig { #"view.${servicesDomain}" = mkServiceConfig {
# host = pc2; # host = pc2;
# port = 1313; # port = 1313;
#}; #};
"zerforschen.plus" = { "zerforschen.plus" = {
addSSL = true; addSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = ("http://unix:" + anubis-domain-socket); proxyPass = ("http://unix:" + anubis-domain-socket);
};
};
"vinzenz-lpt2-in-anubis" = {
root = inputs.zerforschen-plus.packages."${pkgs.system}".zerforschen-plus-content;
listen = [
{
addr = ("unix:" + blog-domain-socket);
}
];
}; };
}; };
};
"vinzenz-lpt2-in-anubis" = {
root = inputs.zerforschen-plus.packages."${pkgs.system}".zerforschen-plus-content;
listen = [
{
addr = ("unix:" + blog-domain-socket);
}
];
};
};
anubis = { anubis = {
instances.main = { instances.main = {
@ -94,11 +96,11 @@ in
}; };
}; };
}; };
networking.firewall.allowedTCPPorts = [
80
443
5201
];
}; };
networking.firewall.allowedTCPPorts = [
80
443
5201
];
} }