blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

333 current 2025-10-11 20:08:52 25.05.20251006.20c4598 6.12.50 *

Browse Source
This commit is contained in:
blake
2025-10-11 20:16:55 -05:00
parent 4e183acd6f
commit 09b23d71f5
2 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
flake.nix
View File

@@ -1,6 +1,6 @@
# flake for blakes nixos config # flake for blakes nixos config
# define new devices in outputs # define new devices in outputs
# generation: 332 current 2025-10-11 20:07:14 25.05.20251006.20c4598 6.12.50 * # generation: 333 current 2025-10-11 20:08:52 25.05.20251006.20c4598 6.12.50 *
{ {
description = "blakes nix config"; description = "blakes nix config";
inputs = { inputs = {

20
modules/homelab/services/nginx-proxy/default.nix
View File

@@ -16,6 +16,12 @@ in
enable = true; enable = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
commonHttpConfig = ''
error_page 404 = @youtube;
location @youtube {
return 302 https://www.youtube.com/watch?v=dQw4w9WgXcQ;
}
'';
}; };
# enable acme for auto ssl certs with lets encrypt # enable acme for auto ssl certs with lets encrypt
security.acme = { security.acme = {
@@ -23,14 +29,22 @@ in
defaults.email = "me@blakedheld.xyz"; defaults.email = "me@blakedheld.xyz";
}; };
systemd.tmpfiles.rules = [
"d /var/www/keys 0755 nginx nginx -"
];
# static entries # static entries
services.nginx.virtualHosts."key.${homelab.public_domain}" = { services.nginx.virtualHosts."key.${homelab.public_domain}" = {
forceSSL = true; forceSSL = true;
sslCertificate = sec."ssl_blakedheld_crt".path; sslCertificate = sec."ssl_blakedheld_crt".path;
sslCertificateKey = sec."ssl_blakedheld_key".path; sslCertificateKey = sec."ssl_blakedheld_key".path;
root = "/etc/webroot_keys"; root = "/var/www/keys";
locations."/klefki_pub.asc" = { locations."/" = {
index = "klefki_pub.asc"; index = "klefki_pub.asc";
extraConfig = ''
add_header Content-Disposition "attachment; filename=klefki_pub.asc";
default_type application/pgp-keys;
'';
}; };
}; };
@@ -48,7 +62,7 @@ in
"klefki_pub.asc" = { "klefki_pub.asc" = {
owner = "nginx"; owner = "nginx";
group = "nginx"; group = "nginx";
path = "/etc/webroot_keys/klefki_pub.asc"; path = "/var/www/keys/klefki_pub.asc";
}; };
}; };
}; };