uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(vesuvio): change nginx config a bit

Browse source
This commit is contained in:
uku 2025-06-30 12:14:40 +02:00
parent ac96bb47e9
commit 389f6b2e10
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
4 changed files with 75 additions and 80 deletions
Download patch file Download diff file Expand all files Collapse all files

117
systems/vesuvio/nginx.nix
View file

@ -1,52 +1,83 @@
{
services.nginx.virtualHosts = {
# default server
"vps.uku3lig.net" = {
default = true;
addSSL = true;
enableACME = true;
locations."/".return = "404";
};
# immich
"im.uku.moe" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:2283";
proxyWebsockets = true;
services.nginx = {
enable = true;
virtualHosts = {
# default server
"vps.uku3lig.net" = {
default = true;
addSSL = true;
enableACME = true;
locations."/".return = "404";
};
extraConfig = ''
client_max_body_size 5000M;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
send_timeout 600s;
'';
};
# immich
"im.uku.moe" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://etna:2283";
proxyWebsockets = true;
};
# dendrite
"m.uku.moe" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://etna:80";
recommendedProxySettings = true;
};
};
"zipline.uku3lig.net" = {
serverAliases = [ "v.uku.moe" ];
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://etna:3001";
recommendedProxySettings = true;
extraConfig = ''
client_max_body_size 5000M;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
send_timeout 600s;
'';
};
extraConfig = ''
client_max_body_size 1000M;
'';
# dendrite
"m.uku.moe" = {
forceSSL = true;
enableACME = true;
locations =
let
server = {
"m.server" = "m.uku.moe:443";
};
client = {
"m.homeserver"."base_url" = "https://m.uku.moe";
};
in
{
"=/.well-known/matrix/server" = {
return = "200 '${builtins.toJSON server}'";
};
"=/.well-known/matrix/client" = {
return = "200 '${builtins.toJSON client}'";
};
"/" = {
proxyPass = "http://etna:8008";
proxyWebsockets = true;
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_read_timeout 600;
client_max_body_size 100M;
'';
};
};
};
"zipline.uku3lig.net" = {
serverAliases = [ "v.uku.moe" ];
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://etna:3001";
recommendedProxySettings = true;
};
extraConfig = ''
client_max_body_size 1000M;
'';
};
};
};
# we depend on etna, which makes nginx fail if it's started before tailscale
systemd.services.nginx.after = [ "tailscaled.service" ];
}