liv/nixos-config
1
0
Fork 0
mirror of https://github.com/Ahwxorg/nixos-config.git synced 2025-12-04 15:00:13 +01:00
Code Issues 1 Projects Releases Packages Wiki Activity Actions

chore: switch away from useACME

Browse source
This commit is contained in:
Ahwx 2025-05-23 03:09:40 +02:00
parent a371faa29c
commit 8dd8ffb3c8
5 changed files with 19 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

11
modules/services/gokapi.nix
View file

@ -1,8 +1,15 @@
{ lib, config, pkgs, ... }: { {
lib,
config,
pkgs,
...
}:
{
services = { services = {
nginx.virtualHosts."share.liv.town" = { nginx.virtualHosts."share.liv.town" = {
useACMEHost = "liv.town";
forceSSL = true; forceSSL = true;
sslCertificate = "/var/lib/acme/liv.town/cert.pem";
sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
locations."/" = { locations."/" = {
proxyPass = "http://localhost:53842"; proxyPass = "http://localhost:53842";
}; };

3
modules/services/grafana.nix
View file

@ -11,8 +11,9 @@
}; };
nginx.virtualHosts.${config.services.grafana.domain} = { nginx.virtualHosts.${config.services.grafana.domain} = {
useACMEHost = "liv.town";
forceSSL = true; forceSSL = true;
sslCertificate = "/var/lib/acme/liv.town/cert.pem";
sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}"; proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}";
proxyWebsockets = true; proxyWebsockets = true;

4
modules/services/immich.nix
View file

@ -1,11 +1,11 @@
{ config, ... }: { { config, ... }:
{
services.immich = { services.immich = {
enable = true; enable = true;
port = 2283; port = 2283;
}; };
# services.nginx.virtualHosts."" = { # services.nginx.virtualHosts."" = {
# enableACME = true;
# forceSSL = true; # forceSSL = true;
# locations."/" = { # locations."/" = {
# proxyPass = "http://localhost:${toString config.services.immich.port}"; # proxyPass = "http://localhost:${toString config.services.immich.port}";

3
modules/services/invidious.nix
View file

@ -12,7 +12,8 @@
virtualHosts = { virtualHosts = {
"video.liv.town" = { "video.liv.town" = {
forceSSL = true; forceSSL = true;
enableACME = true; sslCertificate = "/var/lib/acme/liv.town/cert.pem";
sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.invidious.port}"; locations."/".proxyPass = "http://127.0.0.1:${toString config.services.invidious.port}";
}; };
}; };

6
modules/services/ntfy.nix
View file

@ -2,7 +2,8 @@ let
hostname = "notify.liv.town"; hostname = "notify.liv.town";
port = 2586; port = 2586;
url = "https://" + hostname; url = "https://" + hostname;
in { in
{
services = { services = {
ntfy-sh = { ntfy-sh = {
enable = true; enable = true;
@ -16,8 +17,9 @@ in {
}; };
}; };
nginx.virtualHosts.${hostname} = { nginx.virtualHosts.${hostname} = {
useACMEHost = "liv.town";
forceSSL = true; forceSSL = true;
sslCertificate = "/var/lib/acme/liv.town/cert.pem";
sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:${toString port}"; proxyPass = "http://127.0.0.1:${toString port}";
proxyWebsockets = true; proxyWebsockets = true;