mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nix): Configure reverse-proxy for tazblog

Browse source
This commit is contained in:
Vincent Ambo 2018-01-02 00:55:23 +01:00
parent a646f94d47
commit aac2c029a4
2 changed files with 25 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
nix/configuration.nix
View file

@ -13,10 +13,10 @@
curl emacs htop
];
services.openssh.enable = true;
networking.firewall.allowedTCPPorts = [ 22 ];
networking.firewall.enable = true;
networking.firewall.allowedTCPPorts = [ 22 80 443 ];
users.extraUsers.vincent = {
isNormalUser = true;

30
nix/tazserve.nix
View file

@ -1,13 +1,19 @@
{ pkgs, config, ... }:
with pkgs; let
blogSource = fetchgit {
url = "https://git.tazj.in/tazjin/tazblog.git";
sha256 = "0m745vb8k6slzdsld63rbfg583k70q3g6i5lz576sccalkg0r2l2";
rev = "aeeb11f1b76729115c4db98f419cbcda1a0f7660";
with pkgs; let blogSource = fetchgit {
url = "https://git.tazj.in/tazjin/tazblog.git";
sha256 = "0m745vb8k6slzdsld63rbfg583k70q3g6i5lz576sccalkg0r2l2";
rev = "aeeb11f1b76729115c4db98f419cbcda1a0f7660";
};
tazblog = import ./tazblog { inherit blogSource; };
blog = tazblog.tazblog;
blogConfig = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8000";
};
tazblog = import ./tazblog { inherit blogSource; };
blog = tazblog.tazblog;
};
in {
# Ensure that blog software is installed
environment.systemPackages = [
@ -31,4 +37,14 @@ in {
requires = [ "tazblog-db.service" ];
wantedBy = [ "multi-user.target" ];
};
# Set up reverse proxy
services.nginx = {
enable = true;
recommendedTlsSettings = true;
recommendedProxySettings = true;
virtualHosts."tazj.in" = blogConfig;
virtualHosts."www.tazj.in" = blogConfig;
};
}