2023-04-25 15:57:59 +02:00
|
|
|
{ pkgs, ... }:
|
|
|
|
{
|
|
|
|
security.acme = {
|
|
|
|
acceptTerms = true;
|
|
|
|
defaults = {
|
|
|
|
email = "jade@schrottkatze.de";
|
|
|
|
webroot = "/var/lib/acme/acme-challenge";
|
|
|
|
};
|
|
|
|
certs = {
|
2023-04-27 01:48:20 +02:00
|
|
|
#"meet.katzen.cafe" = {
|
|
|
|
#group = "nginx";
|
|
|
|
#keyType = "rsa4096";
|
|
|
|
#};
|
2023-04-30 14:56:30 +02:00
|
|
|
"wiki.phtanum-b.katzen.cafe" = {
|
|
|
|
group = "nginx";
|
|
|
|
keyType = "rsa4096";
|
|
|
|
};
|
2023-04-27 01:48:20 +02:00
|
|
|
"auth.katzen.cafe" = {
|
2023-04-26 23:25:04 +02:00
|
|
|
group = "nginx";
|
|
|
|
keyType = "rsa4096";
|
|
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
services.nginx = {
|
|
|
|
enable = true;
|
|
|
|
virtualHosts = {
|
2023-04-30 14:56:30 +02:00
|
|
|
"wiki.phtanum-b.katzen.cafe" = {
|
|
|
|
forceSSL = true;
|
|
|
|
enableACME = true;
|
|
|
|
locations."/" = {
|
|
|
|
proxyPass = "http://127.0.0.2:8081";
|
|
|
|
};
|
|
|
|
};
|
2023-04-26 23:25:04 +02:00
|
|
|
"auth.katzen.cafe" = {
|
|
|
|
forceSSL = true;
|
|
|
|
enableACME = true;
|
|
|
|
locations."/" = {
|
2023-04-30 14:56:30 +02:00
|
|
|
proxyPass = "http://127.0.0.1:8080";
|
2023-04-26 23:25:04 +02:00
|
|
|
};
|
2023-04-30 14:56:30 +02:00
|
|
|
extraConfig = ''
|
|
|
|
proxy_set_header X-Forwarded-For $proxy_protocol_addr;
|
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
proxy_set_header Host $host;
|
|
|
|
'';
|
2023-04-26 23:25:04 +02:00
|
|
|
};
|
2023-04-25 15:57:59 +02:00
|
|
|
};
|
2023-04-26 23:25:04 +02:00
|
|
|
|
2023-04-25 15:57:59 +02:00
|
|
|
};
|
|
|
|
}
|