summaryrefslogtreecommitdiff
path: root/nix/modules/nginx.nix
diff options
context:
space:
mode:
Diffstat (limited to 'nix/modules/nginx.nix')
-rw-r--r--nix/modules/nginx.nix54
1 files changed, 0 insertions, 54 deletions
diff --git a/nix/modules/nginx.nix b/nix/modules/nginx.nix
deleted file mode 100644
index f911fc1..0000000
--- a/nix/modules/nginx.nix
+++ /dev/null
@@ -1,54 +0,0 @@
-{ config, lib, ... }:
-{
- services.nginx = {
- enable = lib.mkDefault config.monorepo.profiles.server.enable;
- user = "nginx";
- recommendedGzipSettings = true;
- recommendedOptimisation = true;
- recommendedTlsSettings = true;
- recommendedProxySettings = false;
- virtualHosts = {
- "${config.monorepo.vars.remoteHost}" = {
- serverName = "${config.monorepo.vars.remoteHost}";
- serverAliases = [ "${config.monorepo.vars.internetName}.${config.monorepo.vars.orgHost}" ];
- root = "/var/www/${config.monorepo.vars.internetName}-website/";
- addSSL = true;
- enableACME = true;
- };
-
- # the port comes from ssh tunnelling
- "music.${config.monorepo.vars.remoteHost}" = lib.mkIf config.monorepo.profiles.server.enable {
- addSSL = true;
- enableACME = true;
- basicAuthFile = config.sops.secrets."mpd_password".path;
- locations."/" = {
- proxyPass = "http://localhost:8000";
- extraConfig = ''
- proxy_buffering off;
- proxy_http_version 1.1;
- proxy_set_header Connection "";
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_read_timeout 36000s;
- '';
- };
- };
-
- "${config.monorepo.vars.orgHost}" = {
- serverName = "${config.monorepo.vars.orgHost}";
- root = "/var/www/nullring/";
- addSSL = true;
- enableACME = true;
- };
- };
- };
-
- networking.firewall.allowedTCPPorts = lib.mkIf config.services.nginx.enable [ 80 443 ];
-
- networking.domains.subDomains = lib.mkIf config.services.nginx.enable {
- "${config.monorepo.vars.remoteHost}" = { };
- "${config.monorepo.vars.orgHost}" = { };
- "${config.monorepo.vars.internetName}.${config.monorepo.vars.orgHost}" = { };
- };
-}