satr14/nix-flake
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

redirect proxy

Browse source
This commit is contained in:
Satria 2026-03-06 14:50:37 +07:00
commit d8d079953b
1 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

15
modules/system/homelab/proxy.nix
View file

@ -1,6 +1,6 @@
{ homelab, lib, ... }: let
base = "proxy.${homelab.domain}";
proxy-mappings = {
hosts = {
"dns" = { dest = "http://localhost:8088"; auth = true; };
"ai" = { dest = "http://localhost:8080"; auth = true; };
@ -21,6 +21,10 @@
"cdn" = { dest = "http://localhost:3000"; auth = false; };
"@" = { dest = "http://localhost:5070"; auth = false; };
};
redirects = {
"www" = "https://proxy.${homelab.domain}";
"dash" = "https://${homelab.domain}";
};
in {
users.users.nginx.extraGroups = [ "acme" ];
security.acme = {
@ -46,10 +50,13 @@ in {
useACMEHost = base;
locations."/".return = "404";
};
} // lib.mapAttrs' (subdomain: cfg: lib.nameValuePair (if subdomain == "@" then base else "${subdomain}.${base}") {
} // lib.mapAttrs' (subdomain: cfg: lib.nameValuePair "${subdomain}.${base}" {
useACMEHost = base;
forceSSL = true;
locations."/".return = "301 https://${base}$request_uri";
}) redirects // lib.mapAttrs' (subdomain: cfg: lib.nameValuePair (if subdomain == "@" then base else "${subdomain}.${base}") {
useACMEHost = base;
forceSSL = true;
locations."/" = {
proxyPass = cfg.dest;
proxyWebsockets = true;
@ -69,6 +76,6 @@ in {
client_max_body_size 50000M;
'';
};
}) proxy-mappings;
}) hosts;
};
}