hosts/ni/services/reverse-proxy: init

This commit is contained in:
Gabriel Arazas 2024-12-11 13:25:38 +08:00
parent ee7b1d0228
commit 0dfa5a2c15
No known key found for this signature in database
GPG Key ID: 62104B43D00AA360
3 changed files with 23 additions and 0 deletions

View File

@ -20,6 +20,7 @@
services.backup.enable = true; services.backup.enable = true;
services.monitoring.enable = true; services.monitoring.enable = true;
services.penpot.enable = true; services.penpot.enable = true;
services.reverse-proxy.enable = true;
setups = { setups = {
desktop.enable = true; desktop.enable = true;
development.enable = true; development.enable = true;

View File

@ -5,6 +5,7 @@
./networking/setup.nix ./networking/setup.nix
./networking/wireguard.nix ./networking/wireguard.nix
./services/backup ./services/backup
./services/reverse-proxy.nix
./services/monitoring.nix ./services/monitoring.nix
./services/download-media ./services/download-media
./services/penpot ./services/penpot

View File

@ -0,0 +1,21 @@
# A private-use reverse proxy for certain system services.
{ config, lib, pkgs, ... }:
let
hostCfg = config.hosts.ni;
cfg = hostCfg.services.reverse-proxy;
in
{
options.hosts.ni.services.reverse-proxy.enable =
lib.mkEnableOption "private-use reverse proxy setup";
config = lib.mkIf cfg.enable {
services.nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedTlsSettings = true;
recommendedProxySettings = true;
};
};
}