Bos55/nix-config
2
Fork 1
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

feat: Move URLs to vars

Browse source
This commit is contained in:
Tibo De Peuter 2026-02-04 09:25:45 +01:00
parent 6deb36d920
commit ca7875dee9
Signed by: tdpeuter
GPG key ID: 38297DE43F75FFE2
1 changed files with 17 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

30
hosts/Ingress/default.nix
View file

@ -80,7 +80,7 @@ prefixLength = 24;
# Only allow PFS-enabled ciphers with AES256
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
upstreams.docservice.servers."192.168.0.14:8080" = {};
upstreams.docservice.servers."${nextcloud.host}:${toString nextcloud.officePort}" = {};
appendHttpConfig = ''
map $http_x_forwarded_proto $the_scheme {
@ -107,19 +107,24 @@ prefixLength = 24;
default = true;
};
"cloud.depeuter.dev" = {
"cloud.depeuter.dev" = let
nextcloud = {
host = "192.168.0.14";
officePort = 8080;
};
in {
enableACME = true;
forceSSL = true;
locations = {
"/" = {
proxyPass = "http://192.168.0.14";
proxyPass = "http://${nextcloud.host}";
extraConfig = ''
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
fastcgi_request_buffering off;
'';
};
"/office/" = {
proxyPass = "http://192.168.0.14:8080/";
proxyPass = "http://${nextcloud.host}:${toString nextcloud.officePort}/";
priority = 500;
recommendedProxySettings = false;
extraConfig = ''
@ -137,12 +142,6 @@ prefixLength = 24;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
'';
};
"calendar.depeuter.dev" = {
useACMEHost = "depeuter.dev";
locations."/".return = "301 https://cloud.depeuter.dev/apps/calendar";
};
"tasks.depeuter.dev".locations."/".return = "301 https://cloud.depeuter.dev/apps/tasks";
"notes.depeuter.dev".locations."/".return = "301 https://cloud.depeuter.dev/apps/notes";
"home.depeuter.dev" = {
enableACME = true;
@ -158,12 +157,17 @@ prefixLength = 24;
};
};
"jelly.depeuter.dev" = {
"jelly.depeuter.dev" = let
jellyfin = {
host = "192.168.0.94";
port = 8096;
};
in {
enableACME = true;
forceSSL = true;
locations = {
"/" = {
proxyPass = "http://192.168.0.94:8096";
proxyPass = "http://${jellyfin.host}:${jellyfin.port}";
extraConfig = ''
# Proxy main Jellyfin traffic
proxy_set_header Host $host;
@ -178,7 +182,7 @@ prefixLength = 24;
'';
};
"/socket" = {
proxyPass = "http://192.168.0.91:8096";
proxyPass = "http://${jellyfin.host}:${jellyfin.port}";
extraConfig = ''
# Proxy Jellyfin Websockets traffic
proxy_http_version 1.1;