diff --git a/services/nginx.nix b/services/nginx.nix index 8b79a57..24c02a3 100644 --- a/services/nginx.nix +++ b/services/nginx.nix @@ -24,41 +24,10 @@ in quic = true; kTLS = true; forceSSL = true; - #useACMEHost = fqdn; enableACME = true; - #listen = [ - # { - # addr = "0.0.0.0"; - # port = 443; - # ssl = true; - # } - # { - # addr = "[::]"; - # port = 443; - # ssl = true; - # } - # { - # addr = "0.0.0.0"; - # port = 8448; - # ssl = true; - # } - # { - # addr = "[::]"; - # port = 8448; - # ssl = true; - # } - #]; locations = { - #"/.well-known/acme-challenge".root = config.security.acme.defaults.webroot; "/".return = "418 \"I'm a Teapot!\""; - "= /.well-known/matrix/client" = { - return = "200 '{\"m.homeserver\": {\"base_url\": \"https://matrix.berlin.ccc.de\"}}'"; - extraConfig = '' - default_type application/json; - add_header Access-Control-Allow-Origin "*"; - ''; - }; - "~ ^(/_matrix|/_synapse/client)" = { + "~ ^(/_matrix|/_synapse/client|/health)" = { recommendedProxySettings = true; proxyPass = "http://[::1]:8008"; extraConfig = '' @@ -70,8 +39,4 @@ in }; }; }; - - #security.acme.certs."${fqdn}" = { - # reloadServices = [ "nginx" ]; - #}; }