glennwso/nixos-selfhost
1
0
Fork 0
Code Issues 2 Pull requests Packages Projects Releases Wiki Activity

defer tls/ssl to hyperserver

Browse source
This commit is contained in:
glenn 2025-01-14 15:17:47 +01:00
parent f57f9a37f6
commit 5f7cb33867
12 changed files with 50 additions and 82 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ai.nix
View file

@ -9,8 +9,6 @@
in {
services.nginx.virtualHosts = {
${domain} = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:9876/";
proxyWebsockets = true;

13
audiobooks.nix
View file

@ -1,19 +1,13 @@
{ ... }:
let
{...}: let
domain = "books.sondell.org";
in
{
#
in {
#
services.audiobookshelf = {
enable = true;
port = 8000;
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
default = true;
locations."/" = {
proxyPass = "http://localhost:8000/";
@ -21,4 +15,3 @@ in
};
};
}

22
coturn.nix
View file

@ -44,23 +44,22 @@
# open the firewall
networking.firewall = {
interfaces.enp2s0 = let
range = with config.services.coturn; [ {
from = min-port;
to = max-port;
} ];
in
{
range = with config.services.coturn; [
{
from = min-port;
to = max-port;
}
];
in {
allowedUDPPortRanges = range;
allowedUDPPorts = [ 3478 5349 ];
allowedTCPPortRanges = [ ];
allowedTCPPorts = [ 3478 5349 ];
allowedUDPPorts = [3478 5349];
allowedTCPPortRanges = [];
allowedTCPPorts = [3478 5349];
};
};
services.nginx = {
enable = true;
virtualHosts."turn.sondell.org" = {
forceSSL = true;
enableACME = true;
};
};
# get a certificate
@ -82,4 +81,3 @@
];
};
}

2
dufs.nix
View file

@ -36,8 +36,6 @@ in {
};
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${port}/";
proxyWebsockets = true;

2
ebooks.nix
View file

@ -17,8 +17,6 @@ in {
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${toString port}/";
proxyWebsockets = true;

2
filebrowser.nix
View file

@ -35,8 +35,6 @@ in {
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:8080/";
proxyWebsockets = true;

2
forgejo.nix
View file

@ -68,8 +68,6 @@ in {
};
services.nginx.virtualHosts.${domain} = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://localhost:3000/";
};

2
homepage.nix
View file

@ -3,8 +3,6 @@
domain2 = "start.sondell.org";
port = "8118";
hostSettings = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${port}/";
proxyWebsockets = true;

15
jellyfin.nix
View file

@ -1,23 +1,16 @@
{ config, ... }:
let
{config, ...}: let
domain = "jelly.sondell.org";
# derp = "hi";
in
{
#
# derp = "hi";
in {
#
services.jellyfin = {
enable = true;
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:8096/";
proxyWebsockets = true;
};
};
}

45
matrix.nix
View file

@ -1,6 +1,8 @@
{ config, pkgs, ... }:
let
{
config,
pkgs,
...
}: let
domain = "sondell.org";
hostName = "matrix";
fqdn = "${hostName}.${domain}";
@ -12,9 +14,8 @@ let
add_header Access-Control-Allow-Origin *;
return 200 '${builtins.toJSON data}';
'';
in
{
#
in {
#
services.matrix-synapse = {
enable = true;
settings.enable_registration = true;
@ -27,33 +28,29 @@ in
type = "http";
tls = false;
x_forwarded = true;
resources = [
resources = [
{
names = [ "client" "federation" ];
names = ["client" "federation"];
compress = true;
}
}
];
}
];
};
services.postgresql = {
enable = true;
initialScript = pkgs.writeText "synapse-init.sql" ''
CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD 'synapse';
CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
TEMPLATE template0
LC_COLLATE = "C"
LC_CTYPE = "C";
'';
};
services.postgresql = {
enable = true;
initialScript = pkgs.writeText "synapse-init.sql" ''
CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD 'synapse';
CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
TEMPLATE template0
LC_COLLATE = "C"
LC_CTYPE = "C";
'';
};
services.nginx.virtualHosts = {
${fqdn} = {
enableACME = true;
forceSSL = true;
# locations."/".extraConfig = ''
# return 404;
# '';
@ -66,7 +63,6 @@ services.postgresql = {
${domain} = {
enableACME = true;
forceSSL = true;
# locations."/" = {
# proxyPass = "http://localhost:8008";
# };
@ -83,4 +79,3 @@ services.postgresql = {
};
};
}

23
nextcloud.nix
View file

@ -64,10 +64,10 @@ in {
nginx.virtualHosts = {
${domain} = {
forceSSL = true;
enableACME = true;
# Use DNS Challenege.
# acmeRoot = null;
# forceSSL = true;
# enableACME = true;
# # Use DNS Challenege.
# # acmeRoot = null;
};
};
postgresql.enable = true;
@ -90,6 +90,9 @@ in {
# Let NixOS install and configure Redis caching automatically.
configureRedis = true;
settings = {
trusted_proxies = [
"192.168.1.199"
];
maintenance_window_start = 1;
};
extraOptions = {
@ -112,7 +115,7 @@ in {
inherit mail calendar contacts notes onlyoffice cookbook spreed memories previewgenerator;
};
config = {
overwriteProtocol = "https";
# overwriteProtocol = "https";
defaultPhoneRegion = "SE";
dbtype = "pgsql";
adminuser = "admin";
@ -137,9 +140,9 @@ in {
hostname = "office.sondell.org";
jwtSecretFile = "/etc/nixos/.secrets/onlyoffice.jwt";
};
services.nginx.virtualHosts."office.sondell.org" = {
forceSSL = true;
enableACME = true;
# locations."/".proxyPass = "http://12:8123";
};
# services.nginx.virtualHosts."office.sondell.org" = {
# forceSSL = true;
# enableACME = true;
# # locations."/".proxyPass = "http://12:8123";
# };
}

2
vaultwarden.nix
View file

@ -31,8 +31,6 @@ in {
};
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${port}/";
};