luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-07-02 15:37:20 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(dns,nginx): add some weird magic

Browse source
This commit is contained in:
Luj 2024-10-26 04:09:35 +02:00
parent e91ecd2ab6
commit 8d987a5e38
5 changed files with 125 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

6
lib/default.nix
View file

@ -36,17 +36,11 @@ rec {
mkVPNSubdomain = name: port: {
luj.nginx.enable = true;
security.acme.certs."${name}.luj".server = "https://ca.luj/acme/acme/directory";
services.nginx.virtualHosts."${name}.luj" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${toString port}";
extraConfig = ''
allow 100.100.45.0/24;
allow fd7a:115c:a1e0::/48;
deny all;
'';
};
};
};