bryan/nixos
0
0
Fork 0
mirror of https://github.com/itme-brain/nixos.git synced 2026-03-24 00:29:43 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

changes

Browse source
This commit is contained in:
Bryan Ramos 2025-07-06 01:02:30 -04:00
parent 1d99368b0a
commit 433dac83d8
Signed by: bryan
GPG key ID: 6ABDCD144D6643C8
3 changed files with 24 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

22
src/system/modules/nginx/default.nix
View file

@ -4,6 +4,7 @@ with lib;
let
cfg = config.modules.system.nginx;
module = config.modules.system;
forgejo = config.services.forgejo;
in
{ options.modules.system.nginx = { enable = mkEnableOption "Nginx Reverse Proxy"; };
@ -14,13 +15,16 @@ in
description = "Web server system user";
isSystemUser = true;
group = mkForce "${config.services.nginx.group}";
extraGroups = [
"${config.security.acme.defaults.group}"
];
};
"btc" = {
extraGroups = mkIf module.bitcoin.enable [
"${config.services.nginx.group}"
];
};
"${config.services.forgejo.user}" = {
"${forgejo.user}" = {
extraGroups = mkIf module.forgejo.enable [
"${config.services.nginx.group}"
];
@ -36,18 +40,14 @@ in
};
security.acme =
let
acmeDir = "/var/lib/acme";
in
{
acceptTerms = true;
defaults = {
email = "${config.user.email}";
validMinDays = 90;
};
certs = {
"ramos.codes" = {
#webroot = "${acmeDir}/acme-challenge";
directory = "${acmeDir}/ramos.codes";
email = config.user.email;
group = "web";
validMinDays = 90;
extraDomainNames = attrNames config.services.nginx.virtualHosts;
listenHTTP = ":80";
};
@ -58,6 +58,8 @@ in
enable = true;
user = "nginx";
group = "web";
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts =
let
@ -74,7 +76,7 @@ in
"git.ramos.codes" = mkIf module.forgejo.enable {
locations = {
"/" = {
proxyPass = "http://unix:${config.services.forgejo.settings.server.HTTP_ADDR}";
proxyPass = "http://unix:${forgejo.settings.server.HTTP_ADDR}";
};
};
};