xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions

typo
Some checks failed
Test Nix flake / Test nix flake (push) Has been cancelled
Details

Browse source
This commit is contained in:
XenGi 2026-08-26 10:40:21 +02:00
commit 1c3c8710da
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
1 changed files with 30 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

61
hosts/git/forgejo.nix
View file

@ -78,38 +78,39 @@ in
limit_req_zone $binary_remote_addr zone=forgejo_archive:10m rate=2r/s; limit_req_zone $binary_remote_addr zone=forgejo_archive:10m rate=2r/s;
''; '';
virtualHosts."${fqdn}" = { virtualHosts."${fqdn}" = {
quic = true; quic = true;
kTLS = true; kTLS = true;
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
extraConfig = '' extraConfig = ''
merge_slashes off; # Required to handle URL-encoded slashes merge_slashes off; # Required to handle URL-encoded slashes
''; '';
locations = { locations = {
"/" = { "/" = {
recommendedProxySettings = true; recommendedProxySettings = true;
proxyWebsockets = true; proxyWebsockets = true;
proxyPass = "http://unix:${config.services.forgejo.settings.server.HTTP_ADDR}"; proxyPass = "http://unix:${config.services.forgejo.settings.server.HTTP_ADDR}";
extraConfig = '' extraConfig = ''
client_max_body_size 512M; client_max_body_size 512M;
'';
};
"/metrics" = {
recommendedProxySettings = true;
proxyPass = "http://unix:${config.services.forgejo.settings.server.HTTP_ADDR}";
extraConfig = ''
allow 195.160.173.14;
allow 2001:678:760:cccb::14;
deny all;
'';
};
"~ ^/[^/]+/[^/]+/archive/".extraConfig = ''
limit_req zone=forgejo_archive burst=10 nodelay;
'';
"= /robots.txt".extraConfig = ''
default_type text/plain;
return 200 "User-agent: *\nDisallow: /*/*/archive/\n";
''; '';
}; };
"/metrics" = {
recommendedProxySettings = true;
proxyPass = "http://unix:${config.services.forgejo.settings.server.HTTP_ADDR}";
extraConfig = ''
allow 195.160.173.14;
allow 2001:678:760:cccb::14;
deny all;
'';
};
"~ ^/[^/]+/[^/]+/archive/".extraConfig = ''
limit_req zone=forgejo_archive burst=10 nodelay;
'';
"= /robots.txt".extraConfig = ''
default_type text/plain;
return 200 "User-agent: *\nDisallow: /*/*/archive/\n";
'';
}; };
}; };
}; };