commit a5e37cab8de09604e5a97c56f9bafa2e5f9f3527 parent fa2b2eddde202d142ae6d0c9e8e4b98f12d6d697 Author: Vineet Kumar <git@vineetk.net> Date: Fri, 26 Dec 2025 01:03:08 -0500 import cleaned nginx config from nixos Diffstat:
| M | epistemia/systems/demiurge.scm | | | 23 | ++++++++++++++++++++++- |
1 file changed, 22 insertions(+), 1 deletion(-)
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm @@ -11,6 +11,7 @@ #:use-module (gnu services shepherd) #:use-module (gnu services ssh) #:use-module (gnu services vpn) + #:use-module (gnu services web) #:use-module (gnu system accounts) #:use-module (guix) #:use-module (guix gexp) @@ -23,6 +24,18 @@ #:use-module (epistemia services zfs) #:use-module (epistemia packages zfs)) +(define (nginx-reverse-proxy domain proxy-port) + (nginx-server-configuration + (server-name (list domain)) + (listen '("10.0.13.2:443" "[fd00:b0ba:cafe:babe::2]:443" "10.0.13.2:80" "[fd00:b0ba:cafe:babe::2]:80")) + (ssl-certificate "/var/demiurge.epistemia.crt") + (ssl-certificate-key "/var/demiurge.epistemia.key") + (locations + (list + (nginx-location-configuration + (uri "/") + (body (list (string-append "proxy_pass http://127.0.0.1:" (number->string proxy-port) ";")))))))) + (operating-system (inherit base-system) (host-name "demiurge") @@ -240,5 +253,13 @@ rpz: (name "lab.epistemia") (public-key "iMDEwvXjPAlQH8ZCmP63FM5ICYIFIX5XIyGxjnXoNVE=") (allowed-ips '("10.0.13.5/32" "fd00:b0ba:cafe:babe::5/128")) - (keep-alive 25))))))) + (keep-alive 25)))))) + (service nginx-service-type + (nginx-configuration + (server-blocks + (list + (nginx-reverse-proxy "searx.demiurge.epistemia" 8081) + (nginx-reverse-proxy "redlib.demiurge.epistemia" 8085) + (nginx-reverse-proxy "navidrome.demiurge.epistemia" 4533) + (nginx-reverse-proxy "sdui.demiurge.epistemia" 5000)))))) %base-services)))