bryan/nixos
0
0
Fork 0
mirror of https://github.com/itme-brain/nixos.git synced 2026-05-08 14:50:12 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

api key

Browse source
This commit is contained in:
Bryan Ramos 2026-04-14 00:55:20 -04:00
parent 573f5ec95d
commit d8be05169c
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
system/machines/server/modules/nginx/default.nix
View file

@ -163,6 +163,7 @@ in
proxyPass = "http://192.168.0.23:8002/"; proxyPass = "http://192.168.0.23:8002/";
proxyWebsockets = true; proxyWebsockets = true;
extraConfig = '' extraConfig = ''
include ${config.sops.templates."nginx-mcp-auth.conf".path};
proxy_read_timeout 300s; proxy_read_timeout 300s;
proxy_send_timeout 300s; proxy_send_timeout 300s;
''; '';

10
system/machines/server/system.nix
View file

@ -26,6 +26,16 @@
owner = "nginx"; owner = "nginx";
}; };
# MCP endpoint auth — validates X-API-Key header
sops.templates."nginx-mcp-auth.conf" = {
content = ''
if ($http_x_api_key != "${config.sops.placeholder."LLAMA_API_KEY"}") {
return 401 '{"error": "Unauthorized"}';
}
'';
owner = "nginx";
};
modules.system = { modules.system = {
nginx = { nginx = {
enable = true; enable = true;