Luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-04-01 09:40:55 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(pages): cleanup module

Browse source
This commit is contained in:
Julien Malka 2024-10-26 04:06:52 +02:00
parent 0a4c2444bc
commit ab03b23b45
Signed by: Luj
GPG key ID: 6FC74C847011FD83
1 changed files with 59 additions and 76 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
machines/gustave/pages.nix
View file

@ -5,18 +5,6 @@
...
}:
{
options.services.nginx.virtualHosts = lib.mkOption {
type = lib.types.attrsOf (
lib.types.submodule {
config.extraConfig = ''
real_ip_header proxy_protocol;
set_real_ip_from 127.0.0.1;
'';
}
);
};
config = {
age.secrets."pages-settings-file".file = ../../secrets/pages-settings-file.age;
services.codeberg-pages = {
@ -51,12 +39,17 @@
};
networking.firewall.allowedTCPPorts = [
80
443
8447
];
services.nginx.defaultListen = [
luj.nginx.enable = true;
services.nginx = {
appendHttpConfig = ''
set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
'';
defaultListen = [
{
addr = "127.0.0.1";
port = 8446;
@ -69,21 +62,12 @@
}
];
security.acme.acceptTerms = true;
security.acme.defaults.email = "julien@malka.sh";
luj.nginx.enable = lib.mkForce false;
services.nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
streamConfig = ''
map $ssl_preread_server_name $sni_upstream {
hostnames;
default 0.0.0.0:8010;
${lib.concatMapStringsSep "\n" (vhost: " ${vhost} 0.0.0.0:8446;") (
lib.attrNames config.services.nginx.virtualHosts
lib.filter (e: e != "default") (lib.attrNames config.services.nginx.virtualHosts)
)}
}
@ -104,5 +88,4 @@
defaultSSLListenPort = 8446;
};
};
}