50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{ config, ... }:
|
|
{
|
|
users.users.nginx.extraGroups = [ "acme" ];
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
virtualHosts."dryb.org" = {
|
|
useACMEHost = "dryb.org";
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8002";
|
|
};
|
|
};
|
|
virtualHosts."adguard.dryb.org" = {
|
|
useACMEHost = "dryb.org";
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8001";
|
|
};
|
|
};
|
|
virtualHosts."${config.services.gitea.settings.server.DOMAIN}" = {
|
|
useACMEHost = "dryb.org";
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8003";
|
|
};
|
|
};
|
|
virtualHosts."anki.dryb.org" = {
|
|
useACMEHost = "dryb.org";
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8004";
|
|
};
|
|
};
|
|
virtualHosts."vaultwarden.dryb.org" = {
|
|
useACMEHost = "dryb.org";
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8005";
|
|
};
|
|
};
|
|
};
|
|
|
|
networking.firewall = {
|
|
allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
};
|
|
}
|