gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

whee

Browse source
This commit is contained in:
kat witch 2022-03-23 13:01:09 +00:00 • committed by kat
parent e38bb2407d
commit bdf2fedcfe
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
3 changed files with 36 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

19
config/services/access.nix
View file

@ -17,6 +17,12 @@
cname = { inherit (config.network.addresses.public) target; }; cname = { inherit (config.network.addresses.public) target; };
}; };
deploy.tf.dns.records.services_home = {
inherit (config.network.dns) zone;
domain = "home";
cname = { inherit (config.network.addresses.public) target; };
};
services.nginx.virtualHosts = mkMerge [ services.nginx.virtualHosts = mkMerge [
{ {
"cast.${config.network.dns.domain}" = { "cast.${config.network.dns.domain}" = {
@ -33,6 +39,19 @@
"/".proxyPass = "http://cloud.int.kittywit.ch:80/"; "/".proxyPass = "http://cloud.int.kittywit.ch:80/";
}; };
}; };
"home.${config.network.dns.domain}" = {
forceSSL = true;
enableACME = true;
locations = {
"/" = {
proxyPass = "http://home.int.kittywit.ch:80/";
extraConfig = ''
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
'';
};
};
};
"media.${config.network.dns.domain}" = { "media.${config.network.dns.domain}" = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;

16
config/services/ha.nix
View file

@ -17,5 +17,21 @@
]; ];
}; };
deploy.tf.dns.records.services_internal_home = {
inherit (config.network.dns) zone;
domain = "home.int";
cname = { inherit (config.network.addresses.yggdrasil) target; };
};
services.nginx.virtualHosts."home.kittywit.ch" = {
locations."/" = {
proxyPass = "http://127.0.0.1:8123";
extraConfig = ''
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
'';
};
};
network.firewall.public.tcp.ports = [ 8123 ]; network.firewall.public.tcp.ports = [ 8123 ];
} }

2
config/tf

@ -1 +1 @@
Subproject commit 1c019e026cb270aec9471aba005a7e46dddb985c Subproject commit 2ad93ea38ae53603ec670ca30a307033da37248d