Introduce branding-resources site and brand Element welcome/auth page

This commit is contained in:
June 2023-10-07 05:17:53 +02:00
parent 02411bb800
commit ddcf4eff0d
4 changed files with 66 additions and 2 deletions

View file

@ -0,0 +1,56 @@
{ pkgs, ... }:
let
ccchhBrandingResources = pkgs.fetchgit {
url = "https://gitlab.hamburg.ccc.de/ccchh/ccchh-branding.git";
rev = "232dfa89ede1414db58576a491021e15c16a5133";
hash = "sha256-qhNcvkRpLJmFg8yQYUJ6rV0HdTRDcl5Cp/lJ/tL2Q4w=";
};
in
{
services.nginx.virtualHosts = {
"acme-branding-resources.hamburg.ccc.de" = {
enableACME = true;
serverName = "branding-resources.hamburg.ccc.de";
listen = [
{
addr = "0.0.0.0";
port = 31820;
}
];
};
"branding-resources.hamburg.ccc.de" = {
forceSSL = true;
useACMEHost = "branding-resources.hamburg.ccc.de";
listen = [
{
addr = "0.0.0.0";
port = 8443;
ssl = true;
extraParameters = [ "proxy_protocol" ];
}
];
root = pkgs.buildEnv {
name = "ccchh-branding-resources";
paths = [
ccchhBrandingResources
];
};
extraConfig = ''
# Make use of the ngx_http_realip_module to set the $remote_addr and
# $remote_port to the client address and client port, when using proxy
# protocol.
# First set our proxy protocol proxy as trusted.
set_real_ip_from 172.31.17.140;
# Then tell the realip_module to get the addreses from the proxy protocol
# header.
real_ip_header proxy_protocol;
'';
};
};
}

View file

@ -2,6 +2,7 @@
{ {
imports = [ imports = [
./branding-resources.hamburg.ccc.de.nix
./element.hamburg.ccc.de.nix ./element.hamburg.ccc.de.nix
]; ];
} }

View file

@ -43,5 +43,14 @@
}, },
"jitsi": { "jitsi": {
"preferredDomain": "meet.element.io" "preferredDomain": "meet.element.io"
},
"branding": {
"welcome_background_url": "https://branding-resources.hamburg.ccc.de/background/blur-more-blur-edit.jpg",
"auth_header_logo_url": "https://branding-resources.hamburg.ccc.de/logo/ccchh-logo-no-background.png",
"auth_footer_links": [
{ "text": "Website", "url": "https://hamburg.ccc.de/" },
{ "text": "Wiki", "url": "https://wiki.ccchh.net/" },
{ "text": "Status", "url": "https://status.ccchh.net/status/main" }
]
} }
} }

View file

@ -19,7 +19,6 @@ in
{ {
services.nginx.virtualHosts = { services.nginx.virtualHosts = {
"acme-element.hamburg.ccc.de" = { "acme-element.hamburg.ccc.de" = {
default = true;
enableACME = true; enableACME = true;
serverName = "element.hamburg.ccc.de"; serverName = "element.hamburg.ccc.de";
@ -32,7 +31,6 @@ in
}; };
"element.hamburg.ccc.de" = { "element.hamburg.ccc.de" = {
default = true;
forceSSL = true; forceSSL = true;
useACMEHost = "element.hamburg.ccc.de"; useACMEHost = "element.hamburg.ccc.de";