Nix-Config/system/shared/services/nginx.nix

90 lines
2.0 KiB
Nix
Raw Normal View History

2023-07-07 07:22:46 +00:00
{ config, pkgs, inputs, ... }:
{
services.nginx = {
enable = true;
2023-09-27 15:38:33 +00:00
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
2023-09-27 14:38:38 +00:00
gitweb = {
enable = true;
virtualHost = "git.tsvallender.co.uk";
2023-09-28 10:49:13 +00:00
location = "/web";
2023-09-27 14:38:38 +00:00
};
2023-09-27 15:38:33 +00:00
virtualHosts."git.tsvallender.co.uk" = {
forceSSL = true;
enableACME = true;
};
2023-09-29 09:38:28 +00:00
virtualHosts."tsvallender.co.uk" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8000";
extraConfig =
"proxy_set_header X-Real-IP $remote_addr;" +
"proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;" +
"proxy_set_header X-Forwarded-Proto https;" +
"proxy_set_header X-Forwarded-Server $host;" +
"proxy_redirect off;"
;
};
};
2023-10-09 15:55:57 +00:00
# Syncthing
virtualHosts."syncthing.tsvallender.co.uk" = {
forceSSL = true;
enableACME = true;
locations."/" = {
2023-09-27 13:14:51 +00:00
proxyPass = "http://127.0.0.1:8384";
};
2023-07-07 07:22:46 +00:00
};
2023-09-27 15:38:33 +00:00
2023-10-09 15:55:57 +00:00
# Miniflux
2023-09-27 15:38:33 +00:00
virtualHosts."feeds.tsvallender.co.uk" = {
2023-09-27 13:49:16 +00:00
forceSSL = true;
enableACME = true;
2023-09-27 15:38:33 +00:00
locations."/" = {
proxyPass = "http://127.0.0.1:8080";
};
2023-09-27 13:49:16 +00:00
};
2023-09-27 18:40:04 +00:00
2023-10-09 15:55:57 +00:00
# Radicale
2023-09-27 18:40:04 +00:00
virtualHosts."cal.tsvallender.co.uk" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:5232";
};
};
2023-10-09 15:55:57 +00:00
2023-10-19 19:41:47 +00:00
# Redmine
virtualHosts."redmine.tsvallender.co.uk" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000";
};
};
2023-10-09 15:55:57 +00:00
# Wallabag
virtualHosts."wb.tsvallender.co.uk" = {
forceSSL = true;
enableACME = true;
locations."/" = {
2023-10-10 10:39:54 +00:00
proxyPass = "http://127.0.0.1:8485";
2023-10-09 15:55:57 +00:00
};
};
2023-07-07 07:22:46 +00:00
};
2023-09-27 15:38:33 +00:00
security.acme = {
acceptTerms = true;
defaults = {
email = "t+acme@tsvallender.co.uk";
};
};
2023-07-07 07:22:46 +00:00
}