sid/sid.ovh
1
0
Fork 0
Code Issues 3 Pull requests 2 Projects Releases Packages Wiki Activity Actions

enabled intranet
All checks were successful
Build hosts / build-hosts (pull_request) Successful in 17s
Details
Flake check / flake-check (pull_request) Successful in 19s
Details

Browse source
This commit is contained in:
sid 2026-05-02 19:54:28 +02:00
parent 8e279de754
commit 9ae1edc6b4
2 changed files with 44 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

55
hosts/sid/services/nginx.nix
View file

@ -19,12 +19,12 @@ in
enable = true;
openFirewall = true;
forceSSL = ssl;
# virtualHosts."*" = {
# forceSSL = false;
# locations."/.well-known/acme-challenge/" = {
# root = "/var/lib/acme/acme-challenge";
# };
# };
virtualHosts."_" = {
forceSSL = false;
locations."/.well-known/acme-challenge/" = {
root = "/var/lib/acme/acme-challenge";
};
};
virtualHosts."${constants.services.docs.fqdn}" = mkVirtualHost {
inherit ssl;
address = constants.hosts.rx4.ip;
@ -40,10 +40,14 @@ in
address = constants.hosts.rx4.ip;
port = constants.services.miniflux.port;
};
# virtualHosts."${constants.services.netdata.fqdn}" = mkVirtualHost {
# inherit ssl;
# port = constants.services.netdata.port;
# };
virtualHosts."${constants.services.netdata.fqdn}" = {
useACMEHost = "sid-internal";
forceSSL = ssl;
locations."/" = {
proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.netdata.port}";
proxyWebsockets = true;
};
};
virtualHosts."${constants.services.open-webui-oci.fqdn}" = mkVirtualHost {
inherit ssl;
address = constants.hosts.rx4.ip;
@ -61,20 +65,23 @@ in
address = constants.hosts.rx4.ip;
port = constants.services.rsshub-oci.port;
};
# virtualHosts."${constants.services.vaultwarden.fqdn}" = {
# useACMEHost = "sid-internal";
# forceSSL = ssl;
# locations = {
# "/" = {
# proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.vaultwarden.port}";
# };
# };
# };
# virtualHosts."${constants.services.webdav.fqdn}" = mkVirtualHost {
# inherit ssl;
# address = constants.hosts.rx4.ip;
# port = constants.services.webdav.port;
# };
virtualHosts."${constants.services.vaultwarden.fqdn}" = {
useACMEHost = "sid-internal";
forceSSL = ssl;
locations = {
"/" = {
proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.vaultwarden.port}";
};
};
};
virtualHosts."${constants.services.webdav.fqdn}" = {
useACMEHost = "sid-internal";
forceSSL = ssl;
locations."/" = {
proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.webdav.port}";
proxyWebsockets = true;
};
};
# FIXME
# virtualHosts."print.sid.ovh" = {
# enableACME = true;

25
hosts/sid/services/step-ca.nix
View file

@ -75,18 +75,19 @@ in
"d /var/lib/acme/acme-challenge 0755 acme nginx"
];
# security.acme = {
# certs."sid-internal" = {
# domain = constants.services.vaultwarden.fqdn;
# # extraDomainNames = [
# # constants.services.netdata.fqdn
# # constants.services.vaultwarden.fqdn
# # constants.services.webdav.fqdn
# # ];
# server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
# group = "nginx";
# };
# };
security.acme = {
certs."sid-internal" = {
# domain = constants.intranet;
domain = constants.services.vaultwarden.fqdn;
extraDomainNames = [
constants.services.netdata.fqdn
# constants.services.vaultwarden.fqdn
constants.services.webdav.fqdn
];
server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
group = "nginx";
};
};
sops =
let