defer tls/ssl to hyperserver

This commit is contained in:
glenn 2025-01-14 15:17:47 +01:00
parent f57f9a37f6
commit 5f7cb33867
12 changed files with 50 additions and 82 deletions

View file

@ -64,10 +64,10 @@ in {
nginx.virtualHosts = {
${domain} = {
forceSSL = true;
enableACME = true;
# Use DNS Challenege.
# acmeRoot = null;
# forceSSL = true;
# enableACME = true;
# # Use DNS Challenege.
# # acmeRoot = null;
};
};
postgresql.enable = true;
@ -90,6 +90,9 @@ in {
# Let NixOS install and configure Redis caching automatically.
configureRedis = true;
settings = {
trusted_proxies = [
"192.168.1.199"
];
maintenance_window_start = 1;
};
extraOptions = {
@ -112,7 +115,7 @@ in {
inherit mail calendar contacts notes onlyoffice cookbook spreed memories previewgenerator;
};
config = {
overwriteProtocol = "https";
# overwriteProtocol = "https";
defaultPhoneRegion = "SE";
dbtype = "pgsql";
adminuser = "admin";
@ -137,9 +140,9 @@ in {
hostname = "office.sondell.org";
jwtSecretFile = "/etc/nixos/.secrets/onlyoffice.jwt";
};
services.nginx.virtualHosts."office.sondell.org" = {
forceSSL = true;
enableACME = true;
# locations."/".proxyPass = "http://12:8123";
};
# services.nginx.virtualHosts."office.sondell.org" = {
# forceSSL = true;
# enableACME = true;
# # locations."/".proxyPass = "http://12:8123";
# };
}