HackENS/hackens-org-configurations
5
0
Fork 0
Code Issues 2 Pull requests 1 Projects Releases Packages Wiki Activity

Merge branch 'master' into sinavir/amélioration_template

Browse source
This commit is contained in:
sinavir 2022-04-13 01:01:43 +02:00
commit 733062750a
2 changed files with 40 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/hackens-org/configuration.nix
View file

@ -11,8 +11,8 @@
./physical.nix ./physical.nix
../../profiles/core-hackens ../../profiles/core-hackens
./wiki.nix ./wiki.nix
./webpass.nix
# ./bridge.nix # ./bridge.nix
# ./webpass.nix
# ./gha.nix # ./gha.nix
# ./sync.nix # ./sync.nix
./misc ./misc

39
hosts/hackens-org/webpass.nix Normal file
View file

@ -0,0 +1,39 @@
{ pkgs, ... }:
{
security.acme = {
email = "hackens@clipper.ens.fr";
acceptTerms = true;
};
services.vaultwarden = {
enable = true;
config = {
DOMAIN = "https://pass.new.hackens.org";
WEBSOCKET_ENABLED = true;
WEBSOCKET_PORT = 10500;
SIGNUPS_DOMAINS_WHITELIST = "ens.fr,ens.psl.eu";
ROCKET_PORT = 10501;
ROCKET_ADDRESS = "127.0.0.1";
LOG_FILE = "/var/log/vaultwarden";
SIGNUPS_VERIFY = true;
};
environmentFile = "/etc/secrets/vaultwarden.env";
};
services.nginx.virtualHosts."pass.new.hackens.org" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:10501";
proxyWebsockets = true;
};
locations."/notifications/hub" = {
proxyPass = "http://localhost:10500";
proxyWebsockets = true;
};
locations."/notifications/hub/negotiate" = {
proxyPass = "http://localhost:10501";
proxyWebsockets = true;
};
};
}