45 current 2025-10-06 15:34:13 25.05.20251001.5b5be50 6.12.49 *
This commit is contained in:
@@ -48,8 +48,10 @@ in
|
||||
|
||||
# reverse proxy entryo
|
||||
services.nginx.virtualHosts."media.blakedheld.xyz" = {
|
||||
enableACME = false;
|
||||
forceSSL = true;
|
||||
enableACME = true;
|
||||
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
|
||||
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
|
||||
locations."/" = {
|
||||
proxyPass = "http://127.0.0.1:8096";
|
||||
};
|
||||
|
||||
@@ -35,7 +35,15 @@ in
|
||||
group = "root";
|
||||
neededForUsers = true;
|
||||
};
|
||||
|
||||
"ssl_blakedheld_crt" = lib.mkIf config.users.blake.enable {
|
||||
owner = "root";
|
||||
group = "root";
|
||||
};
|
||||
"ssl_blakedheld_key" = lib.mkIf config.users.blake.enable {
|
||||
owner = "root";
|
||||
group = "root";
|
||||
};
|
||||
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user