bchmnn/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: change from namecheap to cloudflare, setup tls with acme, setup vaultwarden

Browse source
This commit is contained in:
Jacob Bachmann 2024-09-10 00:32:58 +02:00
parent 6b55345b66
commit fd794698d3
No known key found for this signature in database
GPG key ID: 7753026D577922A6
12 changed files with 118 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

20
hosts/APPA/services/nginx.nix
View file

@ -3,28 +3,46 @@
services.nginx = {
enable = true;
virtualHosts."dryb.org" = {
useACMEHost = "dryb.org";
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8002";
};
};
virtualHosts."adguard.dryb.org" = {
useACMEHost = "dryb.org";
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8001";
};
};
virtualHosts."${config.services.gitea.domain}" = {
useACMEHost = "dryb.org";
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8003";
};
};
virtualHosts."anki.dryb.org" = {
useACMEHost = "dryb.org";
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8004";
};
};
virtualHosts."vaultwarden.dryb.org" = {
useACMEHost = "dryb.org";
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8005";
};
};
};
networking.firewall = {
allowedTCPPorts = [ 80 ];
allowedTCPPorts = [
80
443
];
};
}