mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(monorepo-gerrit): Configure nginx reverse proxy correctly

Browse source 
Configures the reverse-proxy as per Gerrit's documentation at
https://gerrit-review.googlesource.com/Documentation/config-reverseproxy.html
This commit is contained in:
Vincent Ambo 2020-06-10 22:40:34 +00:00
parent 8ace1010bc
commit 1d40329609
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/nixos/camden/default.nix
View file

@ -411,6 +411,8 @@ in lib.fix(self: {
extraConfig = ''
location / {
proxy_pass http://localhost:4778;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header Host $host;
}
'';
};

10
ops/nixos/modules/monorepo-gerrit.nix
View file

@ -1,7 +1,8 @@
# Gerrit configuration for the TVL monorepo
{ pkgs, config, lib, ... }:
{
let cfg = config.services.gerrit;
in {
services.gerrit = {
enable = true;
listenAddress = "[::]:4778"; # 4778 - grrt
@ -10,7 +11,11 @@
core.packedGitLimit = "100m";
log.jsonLogging = true;
log.textLogging = false;
# TODO: gitweb config
# Configures gerrit for being reverse-proxied by nginx as per
# https://gerrit-review.googlesource.com/Documentation/config-reverseproxy.html
gerrit.canonicalWebUrl = "https://cl.tvl.fyi";
httpd.listenUrl = "proxy-https://${cfg.listenAddress}";
# Configures integration with the locally running OpenLDAP
auth.type = "LDAP";
@ -21,7 +26,6 @@
accountFullName = "cn";
accountEmailAddress = "mail";
groupBase = "ou=groups,dc=tvl,dc=fyi";
gerrit.canonicalWebUrl = "https://cl.tvl.fyi";
# TODO(tazjin): Assuming this is what we'll be doing ...
groupMemberPattern = "(&(objectClass=group)(member=\${dn}))";