oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-10 20:20:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

123

Browse Source
This commit is contained in:
Jor Oqyude
2025-07-24 23:34:57 +03:00
parent 1d8398e891
commit 01ff99a5d7
1 changed files with 17 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/vds/nginx.nix
+17 -16
View File
@@ -8,7 +8,7 @@
{
services = {
nginx = {
enable = true;
enable = false;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
@@ -19,12 +19,12 @@
serverName = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net";
listen = [
{
addr = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net"; # Tailscale IP вашего VDS
addr = "0.0.0.0"; # Tailscale IP вашего VDS
port = 44444;
ssl = false;
}
{
addr = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net"; # Tailscale IP вашего VDS
addr = "0.0.0.0"; # Tailscale IP вашего VDS
port = 44443;
ssl = true;
}
@@ -44,17 +44,18 @@
};
};
};
security.acme = {
acceptTerms = true;
defaults.email = "oqyude@gmail.com"; # Укажите ваш email
certs."${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net" = {
dnsProvider = null; # Tailscale hostname не требует DNS-проверки, если используем HTTP-01
webroot = "/var/lib/acme/acme-challenge";
};
};
networking.firewall.allowedTCPPorts = [
44443
44444
80
];
# security.acme = {
# acceptTerms = true;
# defaults.email = "oqyude@gmail.com"; # Укажите ваш email
# certs."${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net" = {
# dnsProvider = null; # Tailscale hostname не требует DNS-проверки, если используем HTTP-01
# webroot = "/var/lib/acme/acme-challenge";
# extraLegoFlags = [ "--http-01.port=80" ];
# };
# };
# networking.firewall.allowedTCPPorts = [
# 44443
# 44444
# 80
# ];
}