luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-07-01 23:27:18 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore: init garage config on tower

Browse source
This commit is contained in:
Luj 2025-06-17 15:58:25 +02:00
parent 99c14cefa0
commit ea8ff67b73
1 changed files with 59 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

59
machines/biblios/garage.nix
View file

@ -37,6 +37,18 @@ in
}; };
age.secrets."garage-env-file".file = ../../secrets/garage-env-file.age; age.secrets."garage-env-file".file = ../../secrets/garage-env-file.age;
age.secrets."book-auth" = {
file = ../../secrets/book-auth.age;
owner = "nginx";
};
age.secrets."notes-phd-auth" = {
file = ../../secrets/notes-phd-auth.age;
owner = "nginx";
};
age.secrets."notes-perso-auth" = {
file = ../../secrets/notes-perso-auth.age;
owner = "nginx";
};
services.nginx.virtualHosts."${api_domain}" = { services.nginx.virtualHosts."${api_domain}" = {
enableACME = true; enableACME = true;
@ -61,6 +73,53 @@ in
''; '';
}; };
services.nginx.virtualHosts."hownix.works" = {
enableACME = true;
forceSSL = true;
locations."/".extraConfig = ''
proxy_pass http://127.0.0.1:3902;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
'';
locations."/book" = {
basicAuthFile = config.age.secrets.book-auth.path;
extraConfig = ''
proxy_pass http://127.0.0.1:3902;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
'';
};
};
services.nginx.virtualHosts."notes.luj.fr" = {
enableACME = true;
forceSSL = true;
locations."/" = {
basicAuthFile = config.age.secrets.notes-perso-auth.path;
proxyPass = "http://127.0.0.1:3902";
extraConfig = ''
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
'';
};
};
services.nginx.virtualHosts."phd.luj.fr" = {
enableACME = true;
forceSSL = true;
locations."/" = {
basicAuthFile = config.age.secrets.notes-phd-auth.path;
proxyPass = "http://127.0.0.1:3902";
extraConfig = ''
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
'';
};
};
machine.meta.zones."luj.fr".A = [ machine.meta.zones."luj.fr".A = [
config.machine.meta.ips.public.ipv4 config.machine.meta.ips.public.ipv4
]; ];