palo
/
nixos-config
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

wip

Ingolf Wagner 2023-01-27 11:28:35 +01:00
parent e01d144885
commit 07067a1dc5
Signed by: palo
GPG Key ID: 76BF5F1928B9618B
3 changed files with 33 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/components/network/tinc/default.nix
View File

@ -5,8 +5,10 @@ with lib;
options.tinc = {
private = {
enable = mkEnableOption "private tinc setup";
ipv4 = mkOption {
ipv4 = mkOption { type = types.str; };
subnet = mkOption {
type = types.str;
default = "10.23.42.0/24";
};
};
secret = {

30
nixos/machines/robi/transmission.nix
View File

@ -290,20 +290,20 @@ in
# curl -H "Host: transmission.robi.private" https://robi.private/ < will work
# curl -H "Host: transmission.robi.private" https://144.76.13.147/ < wont work
#services.nginx = {
# enable = true;
# recommendedProxySettings = true;
# virtualHosts = {
# "transmission.${config.networking.hostName}.private" = {
# extraConfig = ''
# allow ${config.module.cluster.services.tinc.private.networkSubnet};
# deny all;
# '';
# locations."/" = {
# proxyPass = "http://${containerAddress}:${toString uiPort}";
# };
# };
# };
#};
services.nginx = {
enable = true;
recommendedProxySettings = true;
virtualHosts = {
"transmission.${config.networking.hostName}.private" = {
extraConfig = ''
allow ${config.tinc.private.subnet};
deny all;
'';
locations."/" = {
proxyPass = "http://${containerAddress}:${toString uiPort}";
};
};
};
};
}

30
nixos/machines/robi/transmission2.nix
View File

@ -168,20 +168,20 @@ in
# curl -H "Host: transmission.robi.private" https://robi.private/ < will work
# curl -H "Host: transmission.robi.private" https://144.76.13.147/ < wont work
#services.nginx = {
# enable = true;
# recommendedProxySettings = true;
# virtualHosts = {
# "transmission2.${config.networking.hostName}.private" = {
# extraConfig = ''
# allow ${config.module.cluster.services.tinc.private.networkSubnet};
# deny all;
# '';
# locations."/" = {
# proxyPass = "http://127.0.0.1:${toString uiPort}";
# };
# };
# };
#};
services.nginx = {
enable = true;
recommendedProxySettings = true;
virtualHosts = {
"transmission2.${config.networking.hostName}.private" = {
extraConfig = ''
allow ${config.tinc.private.subnet};
deny all;
'';
locations."/" = {
proxyPass = "http://127.0.0.1:${toString uiPort}";
};
};
};
};
}