diff options
| author | vin <vin@vineetk.net> | 2025-03-02 00:59:35 -0500 |
|---|---|---|
| committer | vin <vin@vineetk.net> | 2025-03-02 04:49:18 -0500 |
| commit | 2b873d6e9db9f8536a96298f42455295f8fa7204 (patch) | |
| tree | fa9009804ff802ed23fe2dce9346e1efb2015128 | |
| parent | 6121634e3f31305f8884943a437e1e5de53dc060 (diff) | |
saklas: add nginx config, but have it disabled until later
| -rw-r--r-- | hosts/saklas/default.nix | 22 |
1 files changed, 16 insertions, 6 deletions
diff --git a/hosts/saklas/default.nix b/hosts/saklas/default.nix index 0c50167..0d949ec 100644 --- a/hosts/saklas/default.nix +++ b/hosts/saklas/default.nix | |||
| @@ -35,6 +35,7 @@ | |||
| 35 | isNormalUser = true; | 35 | isNormalUser = true; |
| 36 | 36 | ||
| 37 | extraGroups = [ | 37 | extraGroups = [ |
| 38 | "nginx" | ||
| 38 | "wheel" | 39 | "wheel" |
| 39 | ]; | 40 | ]; |
| 40 | 41 | ||
| @@ -89,34 +90,43 @@ | |||
| 89 | services = { | 90 | services = { |
| 90 | # reverse proxy | 91 | # reverse proxy |
| 91 | nginx = { | 92 | nginx = { |
| 92 | enable = true; | 93 | enable = false; |
| 93 | 94 | ||
| 94 | recommendedGzipSettings = true; | 95 | recommendedGzipSettings = true; |
| 95 | recommendedOptimisation = true; | 96 | recommendedOptimisation = true; |
| 96 | recommendedProxySettings = true; | 97 | recommendedProxySettings = true; |
| 97 | recommendedTlsSettings = true; | 98 | recommendedTlsSettings = true; |
| 99 | recommendedZstdSettings = true; | ||
| 98 | 100 | ||
| 99 | /* | ||
| 100 | virtualHosts = { | 101 | virtualHosts = { |
| 101 | "vineetk.net" = { | 102 | "vineetk.net" = { |
| 102 | enableACME = true; | 103 | enableACME = true; |
| 103 | forceSSL = true; | 104 | forceSSL = true; |
| 104 | locations."/".proxyPass = "http://127.0.0.1:8081"; | 105 | default = true; |
| 106 | locations."/" = { | ||
| 107 | index = "index.html"; | ||
| 108 | root = "/var/www/vineetk_html"; | ||
| 109 | }; | ||
| 105 | }; | 110 | }; |
| 106 | 111 | ||
| 107 | "vinbiz.ca" = { | 112 | "vinbiz.ca" = { |
| 108 | enableACME = true; | 113 | enableACME = true; |
| 109 | forceSSL = true; | 114 | forceSSL = true; |
| 110 | locations."/".proxyPass = "http://127.0.0.1:8082"; | 115 | locations."/" = { |
| 116 | index = "index.html"; | ||
| 117 | root = "/var/www/vinbiz_html"; | ||
| 118 | }; | ||
| 111 | }; | 119 | }; |
| 112 | 120 | ||
| 113 | "13f0.net" = { | 121 | "13f0.net" = { |
| 114 | enableACME = true; | 122 | enableACME = true; |
| 115 | forceSSL = true; | 123 | forceSSL = true; |
| 116 | locations."/".proxyPass = "http://127.0.0.1:4533"; | 124 | locations."/" = { |
| 125 | index = "index.html"; | ||
| 126 | root = "/var/www/13f0_html"; | ||
| 127 | }; | ||
| 117 | }; | 128 | }; |
| 118 | }; | 129 | }; |
| 119 | */ | ||
| 120 | }; | 130 | }; |
| 121 | 131 | ||
| 122 | # ssh | 132 | # ssh |
