infra/hosts/dav/baikal.nix
Ricardo (XenGi) Band 6022b14de8
Some checks failed
Test Nix flake / Test nix flake (push) Has been cancelled
send nginx log to journal
2026-10-30 23:12:25 +01:00

31 lines
722 B
Nix

{ config, ... }:
let
fqdn = "dav.${config.networking.domain}";
in
{
imports = [
../../services/nginx.nix
../../services/prometheus-nginx.nix
];
services = {
baikal = {
enable = true;
virtualHost = fqdn;
};
nginx.virtualHosts.${fqdn} = {
default = true;
quic = true;
kTLS = true;
forceSSL = true;
enableACME = true;
extraConfig = ''
proxy_set_header Forwarded "$proxy_forwarded_for_element;$proxy_forwarded_by_element;host=$host;proto=$scheme";
error_log syslog:server=unix:/dev/log,tag=${builtins.replaceStrings [ "." ] [ "_" ] fqdn} warn;
access_log syslog:server=unix:/dev/log vhost_combined;
'';
};
};
}