Luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-03-27 06:10:53 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added automatic ssl certificates for internal domains

Browse source
This commit is contained in:
Julien Malka 2022-05-10 06:45:21 +02:00
parent 5dc1c4ac79
commit 919c11573f
Signed by: Luj
GPG key ID: 6FC74C847011FD83
2 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/default.nix
View file

@ -35,6 +35,7 @@ in
htpdate = prev.pkgs.callPackage ../packages/htpdate { };
authelia = prev.pkgs.callPackage ../packages/authelia { };
paperless-ng = prev.pkgs.callPackage ../packages/paperless-ng { };
tailscale = prev.unstable.tailscale;
})
inputs.neovim-nightly-overlay.overlay
];
@ -57,14 +58,13 @@ in
mkVPNSubdomain = name: port: {
luj.nginx.enable = true;
security.acme.certs."${name}.luj".server = "https://ca.luj:8443/acme/acme/directory";
services.nginx.virtualHosts."${name}.luj" = {
sslCertificate = "/etc/nginx/certs/${name}.luj/cert.pem";
sslCertificateKey = "/etc/nginx/certs/${name}.luj/key.pem";
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${toString port}";
extraConfig = ''
allow 10.100.0.0/24;
allow 100.10.10.0/8;
deny all;
'';

1
lib/luj.nix
View file

@ -21,6 +21,7 @@ lib: with lib; let
_module.freeformType = with types; attrs;
domain = "julienmalka.me";
internalDomain = "luj";
machines = {
lisa = {