nixos-config

commit 66b63d32d13e8031b541441024f296cb3c34ba1f
parent b51d861ad37ef7cc98f8693bb58e49a63f15beac
Author: vin <vin@vineetk.net>
Date:   Thu,  9 Jan 2025 04:13:26 -0500

add dnsmasq and nginx reverse proxy

Diffstat:
M
hosts/demiurge/default.nix
 | 
37
+++++++++++++++++++++++++++++++++++++

1 file changed, 37 insertions(+), 0 deletions(-)
diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
@@ -157,6 +157,22 @@
   };
 
   services = {
+    # dns
+    dnsmasq = {
+      enable = true;
+      settings = {
+        server = [
+          "192.168.1.1"
+          "/vpn/10.0.13.1"
+        ];
+
+        interface = "lo";
+        listen-address = "127.0.0.1";
+        bind-interfaces = true;
+        no-resolv = true;
+      };
+    };
+
     # graphical input
     libinput = {
       enable = true;
@@ -170,6 +186,27 @@
       };
     };
 
+    # reverse proxy
+    nginx = {
+      enable = true;
+
+      defaultListenAddresses = [ "10.0.13.2" ];
+
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts = {
+        "searx.demiurge.vpn" = {
+          forceSSL = true;
+          locations."/".proxyPass = "http://127.0.0.1:8081";
+          sslCertificate = "/var/demiurge.vpn.crt";
+          sslCertificateKey = "/var/demiurge.vpn.key";
+        };
+      };
+    };
+
     # ssh
     openssh = {
       enable = true;