sam/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

nginx configs for semitamaps and vaultwarden

Browse source
This commit is contained in:
Sam 2025-02-07 15:03:01 +00:00
parent 27a7b00565
commit 53106e91da
2 changed files with 31 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/common/optional/nginx/semitamaps.nix Normal file
View file

@ -0,0 +1,7 @@
{
networking.firewall.allowedTCPPorts = [ 80 ];
services.nginx.enable = true;
services.nginx.virtualHosts."samchance.xyz" = {
root = "/srv/hello/";
};
}

24
hosts/common/optional/nginx/vaultwarden.nix Normal file
View file

@ -0,0 +1,24 @@
{configVars, ...}: let
email = configVars.email.user;
domain = configVars.domains.vaultwarden;
vaultwardenIp = configVars.networking.addresses.vaultwarden.localAddress;
vaultwardenPort = configVars.networking.addresses.vaultwarden.port;
in {
networking.firewall.allowedTCPPorts = [80 443];
security.acme = {
acceptTerms = true;
defaults.email = email;
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."${domain}" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://${vaultwardenIp}:${toString vaultwardenPort}";
};
};
};
}