gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(hakurei): fallback ssl host

Browse source
This commit is contained in:
arcnmx 2024-03-21 15:02:41 -07:00
parent 41d030658d
commit a7f7e38532
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
systems/hakurei/nixos.nix
View file

@ -69,6 +69,14 @@ in {
security.acme.certs = let
inherit (nginx) access virtualHosts;
in {
hakurei = {
inherit (nginx) group;
domain = config.networking.fqdn;
extraDomainNames = [
config.lib.access.hostnameForNetwork.local
(mkIf config.services.tailscale.enable config.lib.access.hostnameForNetwork.tail)
];
};
sso = {
inherit (nginx) group;
domain = virtualHosts.keycloak.serverName;
@ -205,6 +213,7 @@ in {
streamPort = 41081;
};
virtualHosts = {
fallback.ssl.cert.name = "hakurei";
gensokyoZone.proxied.enable = "cloudflared";
keycloak = {
# we're not the real sso record-holder, so don't respond globally..