From a6691418ecfe903f8748f0f96c893186b7fc1c0b Mon Sep 17 00:00:00 2001 From: Felix Albrigtsen Date: Thu, 6 Jun 2024 20:47:15 +0200 Subject: [PATCH] defiant: update public nginx redirects --- hosts/defiant/services/nginx.nix | 19 +++++++++++++------ 1 file changed, 13 insertions(+), 6 deletions(-) diff --git a/hosts/defiant/services/nginx.nix b/hosts/defiant/services/nginx.nix index 263715d..6561a34 100644 --- a/hosts/defiant/services/nginx.nix +++ b/hosts/defiant/services/nginx.nix @@ -31,7 +31,7 @@ # Publicly exposed services: services.nginx.virtualHosts = let - publicProxy = upstream: { + publicProxy = upstream: overrides: { listen = [ { addr = "192.168.10.175"; port = 43443; ssl = true; } { addr = "192.168.10.175"; port = 43080; ssl = false; } @@ -49,11 +49,18 @@ server_tokens off; ''; - }; + } // overrides; in { - "auth.feal.no" = publicProxy "https://voyager.home.feal.no"; - "cloud.feal.no" = publicProxy "http://voyager.home.feal.no"; - "git.feal.no" = publicProxy "http://unix:${config.services.gitea.settings.server.HTTP_ADDR}"; - "jf.feal.no" = publicProxy "http://jellyfin.home.feal.no/"; + "auth.feal.no" = publicProxy "" { + locations."/" = { + proxyPass = "https://voyager.home.feal.no:8300"; + extraConfig = '' + proxy_ssl_verify off; + ''; + }; + }; + "cloud.feal.no" = publicProxy "http://voyager.home.feal.no" {}; + "git.feal.no" = publicProxy "http://unix:${config.services.gitea.settings.server.HTTP_ADDR}" {}; + "jf.feal.no" = publicProxy "http://jellyfin.home.feal.no/" {}; }; }