bchmnn/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(MOMO): set recommended nginx settings

Browse source
This commit is contained in:
Jacob Bachmann 2025-10-13 11:03:00 +02:00
parent 9b95f4de65
commit 624faee52d
Signed by: bchmnn
GPG key ID: 732A612DAD28067D
3 changed files with 15 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

13
hosts/MOMO/services/hedgedoc.nix
View file

@ -5,21 +5,24 @@
settings = { settings = {
port = 8009; port = 8009;
host = "127.0.0.1"; host = "127.0.0.1";
allowOrigin = domain = "hedgedoc.dryb.org";
[ "localhost" "127.0.0.1" "hedgedoc.dryb.org" "md.dryb.org" ]; protocolUseSSL = true;
allowGravatar = true;
db = { db = {
username = "hedgedoc"; username = "hedgedoc";
database = "hedgedoc"; database = "hedgedoc";
host = "postgresql:///hedgedoc"; host = "/run/postgresql";
dialect = "postgresql"; dialect = "postgresql";
}; };
allowAnonymous = false; allowAnonymous = false;
allowAnonymousEdits = false; allowAnonymousEdits = false;
allowFreeURL = true; allowFreeURL = true;
requireFreeURLAuthentication = true; requireFreeURLAuthentication = true;
email = true; email = true;
allowEmailRegister = true; allowEmailRegister = false;
allowGravatar = true;
}; };
}; };

13
hosts/MOMO/services/nginx.nix
View file

@ -2,6 +2,12 @@
{ {
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."hedgedoc.dryb.org" = { virtualHosts."hedgedoc.dryb.org" = {
addSSL = true; addSSL = true;
enableACME = true; enableACME = true;
@ -9,13 +15,6 @@
proxyPass = "http://127.0.0.1:8009"; proxyPass = "http://127.0.0.1:8009";
}; };
}; };
virtualHosts."md.dryb.org" = {
addSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "301 https://hedgedoc.dryb.org$request_uri";
};
};
virtualHosts."miniflux.dryb.org" = { virtualHosts."miniflux.dryb.org" = {
addSSL = true; addSSL = true;
enableACME = true; enableACME = true;