rm nginx, adjust caddy for testing, redo rebuild script
This commit is contained in:
@@ -1,5 +1,31 @@
|
|||||||
{ pkgs, config, lib, ... }:
|
{ pkgs, config, lib, ... }:
|
||||||
|
|
||||||
|
/*
|
||||||
|
no longer in use, replaced by caddy if
|
||||||
|
wanting to use again here is the boilerplate
|
||||||
|
for whatt o put in for each service
|
||||||
|
|
||||||
|
# internal reverse proxy entry
|
||||||
|
services.nginx.virtualHosts."${cfg.url}" = {
|
||||||
|
forceSSL = true;
|
||||||
|
sslCertificate = sec."ssl_blakedheld_crt".path;
|
||||||
|
sslCertificateKey = sec."ssl_blakedheld_key".path;
|
||||||
|
locations."/" = {
|
||||||
|
proxyPass = "http://127.0.0.1:${toString cfg.port}";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# external reverse proxy entry
|
||||||
|
services.nginx.virtualHosts."${service}.blakedheld.xyz" = {
|
||||||
|
forceSSL = true;
|
||||||
|
sslCertificate = sec."ssl_blakedheld_crt".path;
|
||||||
|
sslCertificateKey = sec."ssl_blakedheld_key".path;
|
||||||
|
locations."/" = {
|
||||||
|
proxyPass = "http://127.0.0.1:${toString cfg.port}";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
*/
|
||||||
|
|
||||||
let
|
let
|
||||||
cfg = config.modules.homelab.nginx-proxy;
|
cfg = config.modules.homelab.nginx-proxy;
|
||||||
sec = config.sops.secrets;
|
sec = config.sops.secrets;
|
||||||
@@ -76,28 +76,7 @@ in
|
|||||||
# # open firewall
|
# # open firewall
|
||||||
# networking.firewall.allowedTCPPorts = [ cfg.port ];
|
# networking.firewall.allowedTCPPorts = [ cfg.port ];
|
||||||
|
|
||||||
# internal reverse proxy entry
|
|
||||||
services.nginx.virtualHosts."${cfg.url}" = {
|
|
||||||
forceSSL = true;
|
|
||||||
sslCertificate = sec."ssl_blakedheld_crt".path;
|
|
||||||
sslCertificateKey = sec."ssl_blakedheld_key".path;
|
|
||||||
locations."/" = {
|
|
||||||
proxyPass = "http://127.0.0.1:${toString cfg.port}";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
# uncomment for service hosted publicly
|
|
||||||
#---------------------------------------------------------------------------
|
|
||||||
# # external reverse proxy entry
|
|
||||||
# services.nginx.virtualHosts."${service}.blakedheld.xyz" = {
|
|
||||||
# forceSSL = true;
|
|
||||||
# sslCertificate = sec."ssl_blakedheld_crt".path;
|
|
||||||
# sslCertificateKey = sec."ssl_blakedheld_key".path;
|
|
||||||
# locations."/" = {
|
|
||||||
# proxyPass = "http://127.0.0.1:${toString cfg.port}";
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
#
|
|
||||||
# # add to glance public service
|
# # add to glance public service
|
||||||
# modules.services.glance.links.<category> = [{
|
# modules.services.glance.links.<category> = [{
|
||||||
# title = service;
|
# title = service;
|
||||||
|
|||||||
@@ -251,7 +251,7 @@ in
|
|||||||
|
|
||||||
# add to caddy for reverse proxy
|
# add to caddy for reverse proxy
|
||||||
services.caddy.virtualHosts."${cfg.url}" = {
|
services.caddy.virtualHosts."${cfg.url}" = {
|
||||||
serverAliases = [ "${homelab.public_domain}" ];
|
# serverAliases = [ "${homelab.public_domain}" ];
|
||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
|
tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
|
||||||
reverse_proxy http://127.0.0.1:${toString cfg.port}
|
reverse_proxy http://127.0.0.1:${toString cfg.port}
|
||||||
|
|||||||
Reference in New Issue
Block a user