heartles/nixos-flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

egirls qa

Browse source
This commit is contained in:
jaina heartles 2024-04-15 09:41:49 -07:00
parent 9b90364396
commit d344674642
2 changed files with 79 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
configuration.nix
View file

@ -14,6 +14,7 @@ let
in { in {
imports = [ # Include the results of the hardware scan. imports = [ # Include the results of the hardware scan.
./hardware-configuration.nix ./hardware-configuration.nix
./egirls-qa.nix
#./vpn.nix #./vpn.nix
#/home/jaina/src/nix-deployments/nordvpn/containers.nix #/home/jaina/src/nix-deployments/nordvpn/containers.nix
#/home/jaina/src/nix-deployments/refactor/nixos-containers.nix #/home/jaina/src/nix-deployments/refactor/nixos-containers.nix
@ -250,6 +251,8 @@ in {
intel-gpu-tools intel-gpu-tools
sshfs sshfs
docker
]; ];
programs.sway.enable = true; programs.sway.enable = true;

76
egirls-qa.nix Normal file
View file

@ -0,0 +1,76 @@
{ pkgs, ... }: {
security.acme = {
acceptTerms = true;
defaults.email = "admin+acme@heartles.xyz";
certs."ANY.dev.egirls.gay" = {
domain = "*.dev.egirls.gay";
dnsProvider = "namecheap";
credentialsFile = "/etc/nixos-secrets/namecheap-acme";
group = "nginx";
};
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
virtualHosts = let
mkHost = upstream: {
listen = [
{
port = 443;
addr = "0.0.0.0";
ssl = true;
}
{
port = 80;
addr = "0.0.0.0";
}
];
useACMEHost = "ANY.dev.egirls.gay";
forceSSL = true;
locations."/" = {
proxyWebsockets = true;
proxyPass = upstream;
};
};
in {
"masto1.dev.egirls.gay" = {
listen = [
{
port = 443;
addr = "0.0.0.0";
ssl = true;
}
{
port = 80;
addr = "0.0.0.0";
}
];
useACMEHost = "ANY.dev.egirls.gay";
forceSSL = true;
locations."/" = {
proxyWebsockets = true;
proxyPass = "http://172.16.128.1";
};
};
"eg.dev.egirls.gay" = mkHost "http://127.0.0.1:3000";
"goto.dev.egirls.gay" = mkHost "http://127.0.0.1:8080";
};
};
networking.nat = {
enable = true;
internalInterfaces = [ "ve-+" ];
externalInterface = "wlp0s20f3";
enableIPv6 = true;
};
networking.hosts = {
"127.0.0.1" =
[ "masto1.dev.egirls.gay" "eg.dev.egirls.gay" "goto.dev.egirls.gay" ];
#"5.78.100.40" = [ "jellyfin.home.heartles.xyz" ];
};
networking.firewall.allowedTCPPortRanges = [{
from = 55000;
to = 55100;
}];
}