katzen-cafe/modules/proxy.nix

50 lines
1.1 KiB
Nix
Raw Normal View History

2023-04-25 15:57:59 +02:00
{ pkgs, ... }:
{
security.acme = {
acceptTerms = true;
defaults = {
email = "jade@schrottkatze.de";
webroot = "/var/lib/acme/acme-challenge";
};
certs = {
2023-04-27 01:48:20 +02:00
#"meet.katzen.cafe" = {
#group = "nginx";
#keyType = "rsa4096";
#};
2023-04-30 14:56:30 +02:00
"wiki.phtanum-b.katzen.cafe" = {
group = "nginx";
keyType = "rsa4096";
};
2023-04-27 01:48:20 +02:00
"auth.katzen.cafe" = {
2023-04-26 23:25:04 +02:00
group = "nginx";
keyType = "rsa4096";
};
};
};
services.nginx = {
enable = true;
virtualHosts = {
2023-04-30 14:56:30 +02:00
"wiki.phtanum-b.katzen.cafe" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.2:8081";
};
};
2023-04-26 23:25:04 +02:00
"auth.katzen.cafe" = {
forceSSL = true;
enableACME = true;
locations."/" = {
2023-04-30 14:56:30 +02:00
proxyPass = "http://127.0.0.1:8080";
2023-04-26 23:25:04 +02:00
};
2023-04-30 14:56:30 +02:00
extraConfig = ''
proxy_set_header X-Forwarded-For $proxy_protocol_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
'';
2023-04-26 23:25:04 +02:00
};
2023-04-25 15:57:59 +02:00
};
2023-04-26 23:25:04 +02:00
2023-04-25 15:57:59 +02:00
};
}