fi/nix-infra
1
1
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Use hacky workaround for enableACME check with a proxyProtocol listener

Browse source
This commit is contained in:
fi 2023-07-31 16:43:30 +02:00
parent 2c23fb92c9
commit 6885c40c10
Signed by: fi
SSH key fingerprint: SHA256:d+6fQoDPMbSFK95zRVflRKZLRKF4cPSQb7VIxYkhFsA
9 changed files with 36 additions and 34 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
hosts/web-public-2/virtualHosts/anisync.grzb.de.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

8
hosts/web-public-2/virtualHosts/birdsite.nekover.se.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

4
hosts/web-public-2/virtualHosts/element.nekover.se.nix
View file

@ -17,10 +17,10 @@ in
]; ];
}; };
listen = [ listen = [
{ {
addr = "localhost"; addr = "localhost";
port = 1234; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

8
hosts/web-public-2/virtualHosts/gameserver.grzb.de.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

8
hosts/web-public-2/virtualHosts/git.grzb.de.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

8
hosts/web-public-2/virtualHosts/mewtube.nekover.se.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

8
hosts/web-public-2/virtualHosts/nekover.se.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;

10
hosts/web-public-2/virtualHosts/nextcloud.grzb.de.nix
View file

@ -3,10 +3,12 @@
services.nginx.virtualHosts."nextcloud.grzb.de" = { services.nginx.virtualHosts."nextcloud.grzb.de" = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ { listen = [
addr = "0.0.0.0"; {
port = 80; addr = "localhost";
}{ port = 1234;
} # workaround for enableACME check
{
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;
ssl = true; ssl = true;

8
hosts/web-public-2/virtualHosts/social.nekover.se.nix
View file

@ -4,10 +4,10 @@
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "localhost";
port = 80; port = 1234;
} } # workaround for enableACME check
{ {
addr = "localhost"; addr = "localhost";
port = 8443; port = 8443;