fi/nix-infra
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Just do the nginx proxy_protocol listen in extraConfig and use stable packages

Browse source
This commit is contained in:
fi 2023-09-03 17:43:41 +02:00
parent cc93674cc4
commit 1d8697b70a
Signed by: fi
SSH key fingerprint: SHA256:d+6fQoDPMbSFK95zRVflRKZLRKF4cPSQb7VIxYkhFsA
4 changed files with 23 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

31
hosts/hydra/nginx.nix
View file

@ -3,41 +3,40 @@
services.nginx = {
enable = true;
virtualHosts = {
"hydra.nekover.se" = {
forceSSL = true;
enableACME = true;
listen = [{
addr = "127.0.0.1";
port = 1234;
}{
addr = "0.0.0.0";
port = 8443;
ssl = true;
proxyProtocol = true;
port = 80;
}];
locations."/" = {
proxyPass = "http://localhost:3001";
};
};
extraConfig = ''
listen 0.0.0.0:8443 http2 ssl proxy_protocol;
set_real_ip_from 10.202.41.100;
real_ip_header proxy_protocol;
'';
};
"nix-cache.nekover.se" = {
forceSSL = true;
enableACME = true;
listen = [{
addr = "127.0.0.1";
port = 1234;
}{
listen = [ {
addr = "0.0.0.0";
port = 8443;
ssl = true;
proxyProtocol = true;
port = 80;
}];
locations."/" = {
proxyPass = "http://localhost:5005";
};
extraConfig = ''
listen 0.0.0.0:8443 http2 ssl proxy_protocol;
set_real_ip_from 10.202.41.100;
real_ip_header proxy_protocol;
'';
};
};
};
}