satr14/nix-flake
Watch
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: satr14:d8d079953bca504d0ae861d2b27d90772449bd7c
Branches Tags
satr14:main
satr14:renovate/lock-file-maintenance
satr14:mc-backup
satr14:sops-implementation
..
compare: satr14:440d87c7d23ec37d702d0eb4708d07dade551025
Branches Tags
satr14:main
satr14:renovate/lock-file-maintenance
satr14:mc-backup
satr14:sops-implementation
2 changed files with 7 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

9
modules/system/homelab/pass.nix
View file

@ -2,12 +2,11 @@
services.vaultwarden = {
enable = true;
config = {
DOMAIN = "https://pass.proxy.${homelab.domain}";
ROCKET_PORT = 8060;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_LOG = "critical";
DATA_FOLDER = "/mnt/data/vaultwarden";
DOMAIN = "pass.proxy.${homelab.domain}";
SIGNUPS_ALLOWED = true;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8060;
ROCKET_LOG = "critical";
};
};
}

15
modules/system/homelab/proxy.nix
View file

@ -1,6 +1,6 @@
{ homelab, lib, ... }: let
base = "proxy.${homelab.domain}";
hosts = {
proxy-mappings = {
"dns" = { dest = "http://localhost:8088"; auth = true; };
"ai" = { dest = "http://localhost:8080"; auth = true; };
@ -21,10 +21,6 @@
"cdn" = { dest = "http://localhost:3000"; auth = false; };
"@" = { dest = "http://localhost:5070"; auth = false; };
};
redirects = {
"www" = "https://proxy.${homelab.domain}";
"dash" = "https://${homelab.domain}";
};
in {
users.users.nginx.extraGroups = [ "acme" ];
security.acme = {
@ -50,13 +46,10 @@ in {
useACMEHost = base;
locations."/".return = "404";
};
} // lib.mapAttrs' (subdomain: cfg: lib.nameValuePair "${subdomain}.${base}" {
useACMEHost = base;
forceSSL = true;
locations."/".return = "301 https://${base}$request_uri";
}) redirects // lib.mapAttrs' (subdomain: cfg: lib.nameValuePair (if subdomain == "@" then base else "${subdomain}.${base}") {
} // lib.mapAttrs' (subdomain: cfg: lib.nameValuePair (if subdomain == "@" then base else "${subdomain}.${base}") {
useACMEHost = base;
forceSSL = true;
locations."/" = {
proxyPass = cfg.dest;
proxyWebsockets = true;
@ -76,6 +69,6 @@ in {
client_max_body_size 50000M;
'';
};
}) hosts;
}) proxy-mappings;
};
}