sid/sid.ovh
1
0
Fork 0
Code Issues 3 Pull requests 2 Projects Releases Packages Wiki Activity Actions

new tailscale api
All checks were successful
Flake check / flake-check (pull_request) Successful in 17s
Details
Build hosts / build-hosts (pull_request) Successful in 27s
Details

Browse source
This commit is contained in:
sid 2026-05-02 19:18:17 +02:00
parent 8e3a2a703f
commit 8e279de754
6 changed files with 37 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

32
hosts/sid/services/nginx.nix
View file

@ -19,11 +19,12 @@ in
enable = true;
openFirewall = true;
forceSSL = ssl;
virtualHosts."${constants.ca-fqdn}" = {
locations."/.well-known/acme-challenge/" = {
root = "/var/lib/acme/acme-challenge";
};
};
# virtualHosts."*" = {
# forceSSL = false;
# locations."/.well-known/acme-challenge/" = {
# root = "/var/lib/acme/acme-challenge";
# };
# };
virtualHosts."${constants.services.docs.fqdn}" = mkVirtualHost {
inherit ssl;
address = constants.hosts.rx4.ip;
@ -60,18 +61,15 @@ in
address = constants.hosts.rx4.ip;
port = constants.services.rsshub-oci.port;
};
virtualHosts."${constants.services.vaultwarden.fqdn}" = {
useACMEHost = "sid-internal";
forceSSL = ssl;
locations = {
"/" = {
proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.vaultwarden.port}";
};
"/.well-known/acme-challenge/" = {
root = "/var/lib/acme/acme-challenge";
};
};
};
# virtualHosts."${constants.services.vaultwarden.fqdn}" = {
# useACMEHost = "sid-internal";
# forceSSL = ssl;
# locations = {
# "/" = {
# proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.vaultwarden.port}";
# };
# };
# };
# virtualHosts."${constants.services.webdav.fqdn}" = mkVirtualHost {
# inherit ssl;
# address = constants.hosts.rx4.ip;

24
hosts/sid/services/step-ca.nix
View file

@ -75,18 +75,18 @@ in
"d /var/lib/acme/acme-challenge 0755 acme nginx"
];
security.acme = {
certs."sid-internal" = {
domain = constants.intranet;
extraDomainNames = [
# constants.services.netdata.fqdn
constants.services.vaultwarden.fqdn
# constants.services.webdav.fqdn
];
server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
group = "nginx";
};
};
# security.acme = {
# certs."sid-internal" = {
# domain = constants.services.vaultwarden.fqdn;
# # extraDomainNames = [
# # constants.services.netdata.fqdn
# # constants.services.vaultwarden.fqdn
# # constants.services.webdav.fqdn
# # ];
# server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
# group = "nginx";
# };
# };
sops =
let