tstarr/dotfiles
1
0
Fork 0
mirror of https://github.com/starr-dusT/dotfiles.git synced 2025-05-19 10:56:05 -07:00
Code Issues Packages Projects Releases Wiki Activity

changes to nginx for gollum

Browse Source
This commit is contained in:
Tyler Starr 2023-09-12 22:20:31 -07:00
parent b6c2823d29
commit 988b8b98df
1 changed files with 33 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
provision/nixos/hosts/torus/configuration.nix
View File

@ -71,6 +71,9 @@
unzip unzip
nnn nnn
docker-compose docker-compose
python3
zk
gollum
]; ];
# Enable user services # Enable user services
@ -98,32 +101,44 @@
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];
networking.firewall.allowedUDPPorts = [ 80 443 ]; networking.firewall.allowedUDPPorts = [ 80 443 ];
security.pam.services.nginx.setEnvironment = false;
systemd.services.nginx.serviceConfig = {
SupplementaryGroups = [ "shadow" ];
};
networking.nameservers = [ "8.8.8.8" "8.8.4.4" ];
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
additionalModules = [ pkgs.nginxModules.pam ];
virtualHosts = let virtualHosts = let
SSL = { SSL = {
enableACME = true; enableACME = true;
addSSL = true; forceSSL = true;
}; in { }; in {
#"tstarr.us" = (SSL // {
# locations."/".proxyPass = "http://127.0.0.1:8080/";
# serverAliases = [
# "www.tstarr.us"
# ];
#});
"media.tstarr.us" = (SSL // { "media.tstarr.us" = (SSL // {
locations."/".proxyPass = "http://127.0.0.1:8096/"; locations."/".proxyPass = "http://localhost:8096/";
}); });
"joplin.tstarr.us" = (SSL // { "joplin.tstarr.us" = (SSL // {
locations."/".proxyPass = "http://127.0.0.1:22300/"; locations."/".proxyPass = "http://localhost:22300/";
});
"wiki.tstarr.us" = (SSL // {
locations."/".proxyPass = "http://localhost:4567/";
extraConfig = ''
auth_pam "Password Required";
auth_pam_service_name "nginx";
'';
}); });
}; };
}; };
# Enable modules # Enable modules
imports = [ ../../modules ]; imports = [ ../../modules ];
modules = { modules = {