foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

hosts/plover: add kTLS for various services

Browse Source
This commit is contained in:
Gabriel Arazas 2023-10-03 15:52:42 +08:00
parent 4c71c61768
commit 5f5dc2a14e
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
4 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/plover/modules/services/bind.nix
View File

@ -296,6 +296,7 @@ in
extraConfig = '' extraConfig = ''
add_header Strict-Transport-Security max-age=31536000; add_header Strict-Transport-Security max-age=31536000;
''; '';
kTLS = true;
locations = { locations = {
"/".return = "404"; "/".return = "404";
"/dns-query".extraConfig = '' "/dns-query".extraConfig = ''

3
hosts/plover/modules/services/gitea.nix
View File

@ -171,6 +171,7 @@ in
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
acmeRoot = null; acmeRoot = null;
kTLS = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:${toString config.services.gitea.settings.server.HTTP_PORT}"; proxyPass = "http://localhost:${toString config.services.gitea.settings.server.HTTP_PORT}";
}; };
@ -213,8 +214,6 @@ in
in in
[ [
"L+ ${giteaCustomDir}/templates/home.tmpl - - - - ${../../files/gitea/home.tmpl}" "L+ ${giteaCustomDir}/templates/home.tmpl - - - - ${../../files/gitea/home.tmpl}"
"L+ ${giteaCustomDir}/public/img/logo.svg - - - - ${../../files/gitea/logo.svg}"
"L+ ${giteaCustomDir}/public/img/logo.png - - - - ${../../files/gitea/logo.png}"
]; ];
# Add the following files to be backed up. # Add the following files to be backed up.

1
hosts/plover/modules/services/kanidm.nix
View File

@ -44,6 +44,7 @@ in
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
acmeRoot = null; acmeRoot = null;
kTLS = true;
locations."/".proxyPass = "https://${config.services.kanidm.serverSettings.bindaddress}"; locations."/".proxyPass = "https://${config.services.kanidm.serverSettings.bindaddress}";
}; };

1
hosts/plover/modules/services/vaultwarden.nix
View File

@ -132,6 +132,7 @@ in
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
acmeRoot = null; acmeRoot = null;
kTLS = true;
locations = locations =
let let
address = config.services.vaultwarden.config.ROCKET_ADDRESS; address = config.services.vaultwarden.config.ROCKET_ADDRESS;