sid/sid.ovh
1
0
Fork 0
Code Issues 3 Pull requests 2 Projects Releases Packages Wiki Activity Actions

netdata: ui should only be reachable inside tailnet
All checks were successful
Build hosts / build-hosts (pull_request) Successful in 18s
Details
Flake check / flake-check (pull_request) Successful in 21s
Details

Browse source
This commit is contained in:
sid 2026-05-22 21:17:28 +02:00
parent 69d12812df
commit eac7803895
1 changed files with 15 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

29
hosts/sid/services/netdata.nix
View file

@ -55,20 +55,21 @@ in
NETDATA_USER_CONFIG_DIR = "/etc/netdata/conf.d"; NETDATA_USER_CONFIG_DIR = "/etc/netdata/conf.d";
}; };
services.nginx.virtualHosts."${constants.services.netdata.fqdn}" = { # TODO: move into Tailnet
enableACME = true; # services.nginx.virtualHosts."${constants.services.netdata.fqdn}" = {
forceSSL = true; # enableACME = true;
# forceSSL = true;
locations."/" = { #
root = netdata-dashboard; # locations."/" = {
tryFiles = "$uri $uri/ /index.html"; # root = netdata-dashboard;
}; # tryFiles = "$uri $uri/ /index.html";
# };
locations."~ ^/(api|v[0-9]+|netdata.conf|registry|stream|version.txt)(/|$)" = { #
proxyPass = "http://127.0.0.1:${toString constants.services.netdata.port}"; # locations."~ ^/(api|v[0-9]+|netdata.conf|registry|stream|version.txt)(/|$)" = {
recommendedProxySettings = true; # proxyPass = "http://127.0.0.1:${toString constants.services.netdata.port}";
}; # recommendedProxySettings = true;
}; # };
# };
services.journald.storage = "persistent"; services.journald.storage = "persistent";