45 current 2025-10-06 15:34:13 25.05.20251001.5b5be50 6.12.49 *
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
# flake for blakes nixos config
|
# flake for blakes nixos config
|
||||||
# define new devices in outputs
|
# define new devices in outputs
|
||||||
# generation: 42 current 2025-10-06 15:02:37 25.05.20251001.5b5be50 6.12.49 *
|
# generation: 45 current 2025-10-06 15:34:13 25.05.20251001.5b5be50 6.12.49 *
|
||||||
{
|
{
|
||||||
description = "blakes nix config";
|
description = "blakes nix config";
|
||||||
inputs = {
|
inputs = {
|
||||||
|
|||||||
@@ -48,8 +48,10 @@ in
|
|||||||
|
|
||||||
# reverse proxy entryo
|
# reverse proxy entryo
|
||||||
services.nginx.virtualHosts."media.blakedheld.xyz" = {
|
services.nginx.virtualHosts."media.blakedheld.xyz" = {
|
||||||
|
enableACME = false;
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
enableACME = true;
|
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
|
||||||
|
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
|
||||||
locations."/" = {
|
locations."/" = {
|
||||||
proxyPass = "http://127.0.0.1:8096";
|
proxyPass = "http://127.0.0.1:8096";
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -35,7 +35,15 @@ in
|
|||||||
group = "root";
|
group = "root";
|
||||||
neededForUsers = true;
|
neededForUsers = true;
|
||||||
};
|
};
|
||||||
|
"ssl_blakedheld_crt" = lib.mkIf config.users.blake.enable {
|
||||||
|
owner = "root";
|
||||||
|
group = "root";
|
||||||
|
};
|
||||||
|
"ssl_blakedheld_key" = lib.mkIf config.users.blake.enable {
|
||||||
|
owner = "root";
|
||||||
|
group = "root";
|
||||||
|
};
|
||||||
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user