oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-11 04:30:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

123

Browse Source
This commit is contained in:
Jor Oqyude
2025-07-24 23:34:57 +03:00
parent 1d8398e891
commit 01ff99a5d7
1 changed files with 17 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/vds/nginx.nix
+17 -16
View File
@@ -8,7 +8,7 @@
{ {
services = { services = {
nginx = { nginx = {
enable = true; enable = false;
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;
@@ -19,12 +19,12 @@
serverName = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net"; serverName = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net";
listen = [ listen = [
{ {
addr = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net"; # Tailscale IP вашего VDS addr = "0.0.0.0"; # Tailscale IP вашего VDS
port = 44444; port = 44444;
ssl = false; ssl = false;
} }
{ {
addr = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net"; # Tailscale IP вашего VDS addr = "0.0.0.0"; # Tailscale IP вашего VDS
port = 44443; port = 44443;
ssl = true; ssl = true;
} }
@@ -44,17 +44,18 @@
}; };
}; };
}; };
security.acme = { # security.acme = {
acceptTerms = true; # acceptTerms = true;
defaults.email = "oqyude@gmail.com"; # Укажите ваш email # defaults.email = "oqyude@gmail.com"; # Укажите ваш email
certs."${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net" = { # certs."${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net" = {
dnsProvider = null; # Tailscale hostname не требует DNS-проверки, если используем HTTP-01 # dnsProvider = null; # Tailscale hostname не требует DNS-проверки, если используем HTTP-01
webroot = "/var/lib/acme/acme-challenge"; # webroot = "/var/lib/acme/acme-challenge";
}; # extraLegoFlags = [ "--http-01.port=80" ];
}; # };
networking.firewall.allowedTCPPorts = [ # };
44443 # networking.firewall.allowedTCPPorts = [
44444 # 44443
80 # 44444
]; # 80
# ];
} }