fujin/nixarr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

JF: Fixed acme

Browse Source
This commit is contained in:
rasmus-kirk
2024-02-26 20:30:22 +01:00
parent c20ed40d60
commit 5bb8d16cb8
1 changed files with 43 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixarr/jellyfin/default.nix
+43 -38
View File
@@ -133,51 +133,56 @@ in {
openTcpPorts = [80 443]; openTcpPorts = [80 443];
}; };
services.nginx = mkIf (cfg.expose.https.enable || cfg.vpn.enable) { services.nginx = mkMerge [
enable = true; (mkIf (cfg.expose.https.enable || cfg.vpn.enable) {
enable = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedGzipSettings = true; recommendedGzipSettings = true;
})
virtualHosts."${builtins.replaceStrings ["\n"] [""] cfg.expose.https.domainName}" = mkIf cfg.expose.https.enable { (mkIf cfg.expose.https.enable {
enableACME = true; virtualHosts."${builtins.replaceStrings ["\n"] [""] cfg.expose.https.domainName}" = {
forceSSL = true; enableACME = true;
locations."/" = { forceSSL = true;
recommendedProxySettings = true; locations."/" = {
proxyWebsockets = true; recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:${builtins.toString defaultPort}"; proxyWebsockets = true;
proxyPass = "http://127.0.0.1:${builtins.toString defaultPort}";
};
}; };
}; })
(mkIf cfg.vpn.enable {
virtualHosts."127.0.0.1:${builtins.toString defaultPort}" = mkIf cfg.vpn.enable { virtualHosts."127.0.0.1:${builtins.toString defaultPort}" = mkIf cfg.vpn.enable {
listen = [ listen = [
{ {
addr = "0.0.0.0"; addr = "0.0.0.0";
port = defaultPort; port = defaultPort;
} }
]; ];
locations."/" = { locations."/" = {
recommendedProxySettings = true; recommendedProxySettings = true;
proxyWebsockets = true; proxyWebsockets = true;
proxyPass = "http://192.168.15.1:${builtins.toString defaultPort}"; proxyPass = "http://192.168.15.1:${builtins.toString defaultPort}";
};
}; };
}; })
} // mkIf cfg.expose.vpn.enable { (mkIf cfg.expose.vpn.enable {
virtualHosts."${cfg.expose.vpn.accessibleFrom}:${builtins.toString cfg.expose.vpn.port}" = { virtualHosts."${cfg.expose.vpn.accessibleFrom}:${builtins.toString cfg.expose.vpn.port}" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
locations."/" = { locations."/" = {
recommendedProxySettings = true; recommendedProxySettings = true;
proxyWebsockets = true; proxyWebsockets = true;
proxyPass = "http://192.168.15.1:${builtins.toString defaultPort}"; proxyPass = "http://192.168.15.1:${builtins.toString defaultPort}";
};
}; };
}; })
}; ];
security.acme = mkIf cfg.expose.https.enable { security.acme = mkIf cfg.expose.https.enable {
acceptTerms = true; acceptTerms = true;
defaults.email = cfg.expose.acmeMail; defaults.email = cfg.expose.https.acmeMail;
}; };
util-nixarr.vpnnamespace.portMappings = [ util-nixarr.vpnnamespace.portMappings = [