home

commit 6f538355c67679ba3cc9f7851317e946f47b3edd
parent 4144f54b40ddba7c5d4a40b6b3183e4a1d286546
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Fri, 15 Apr 2022 12:19:10 +0200

systems: trying something with kerkouane and wakasu

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
M
systems/hosts/kerkouane.nix
 | 
9
+++++++++
M
systems/hosts/wakasu.nix
 | 
15
+++++++++++++++

2 files changed, 24 insertions(+), 0 deletions(-)
diff --git a/systems/hosts/kerkouane.nix b/systems/hosts/kerkouane.nix
@@ -178,6 +178,15 @@ in
         locations."/" = { proxyPass = "http://127.0.0.1:8080"; };
         extraConfig = nginxExtraConfig;
       };
+      virtualHosts."whoami.sbr.pm" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxy_set_header = "Host            $host";
+          proxy_set_header = "X-Forwarded-For $remote_addr";
+          proxyPass = "http://10.100.0.8:80";
+        };
+      };
       virtualHosts."sbr.pm" = {
         enableACME = true;
         forceSSL = true;
diff --git a/systems/hosts/wakasu.nix b/systems/hosts/wakasu.nix
@@ -94,6 +94,21 @@ in
       endpointPort = endpointPort;
       endpointPublicKey = endpointPublicKey;
     };
+    nginx = {
+      enable = true;
+      recommendedGzipSettings = true;
+      recommendedTlsSettings = true;
+      recommendedOptimisation = true;
+      virtualHosts."whoami.sbr.pm" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxy_set_header = "Host            $host";
+          proxy_set_header = "X-Forwarded-For $remote_addr";
+          proxyPass = "http://192.168.1.187:80";
+        };
+      };
+    };
   };
 
   # Move this to a "builder" role