123

nixosModules/vds/cloudflared.nix

@@ -1,74 +0,0 @@
-{
-  config,
-  pkgs,
-  inputs,
-  ...
-}:
-{
-  services = {
-    cloudflared = {
-      enable = false;
-      certificateFile = "${inputs.zeroq-credentials}/services/cloudflared/cert.pem";
-      tunnels = {
-        "58b340ee-e98a-4af9-b786-74600c71f49e" = {
-          credentialsFile = "${inputs.zeroq-credentials}/services/cloudflared/server.json";
-          warp-routing.enabled = true;
-          ingress = {
-            "immich.zeroq.ru" = {
-              service = "http://sapphira.latxa-platy.ts.net:2283";
-            };
-            "nextcloud.zeroq.ru" = {
-              service = "http://sapphira.latxa-platy.ts.net:10000";
-            };
-            "llm.zeroq.ru" = {
-              service = "http://atoridu.latxa-platy.ts.net:11111";
-            };
-          };
-          default = "http_status:404";
-        };
-        #         "58b340ee-e98a-4af9-b786-74600c71f49e" = {
-        #           credentialsFile = "${inputs.zeroq.dirs.server-credentials}/cloudflared/server.json";
-        #           warp-routing.enabled = true;
-        #           ingress = {
-        #             "nextcloud.zeroq.ru" = {
-        #               service = "http://localhost:10000";
-        #             };
-        #           };
-        #           default = "http_status:404";
-        #         };
-      };
-    };
-  };
-
-  #   users.users = {
-  #     cloudflared = {
-  #       group = "cloudflared";
-  #       isSystemUser = true;
-  #     };
-  #   };
-  #   users.groups.cloudflared = { };
-  #
-  #   systemd.services.cloudflared = {
-  #     after = [
-  #       "network.target"
-  #       "network-online.target"
-  #     ];
-  #     wants = [
-  #       "network.target"
-  #       "network-online.target"
-  #     ];
-  #     wantedBy = [ "multi-user.target" ];
-  #     serviceConfig = {
-  #       ExecStart = "${pkgs.cloudflared}/bin/cloudflared tunnel --no-autoupdate --config=${inputs.zeroq.dirs.server-credentials}/cloudflared/config.yaml --origincert=${inputs.zeroq.dirs.server-credentials}/cloudflared/cert.pem --credentials-file=${inputs.zeroq.dirs.server-credentials}/cloudflared/server.json run";
-  #       Group = "root";
-  #       User = "root";
-  #       Restart = "on-failure";
-  #     };
-  #   };
-
-  environment = {
-    systemPackages = with pkgs; [
-      cloudflared
-    ];
-  };
-}

nixosModules/vds/default.nix

@@ -5,7 +5,7 @@
 {
   imports = [
     ./docker.nix
-    ./netbird.nix
+    # ./netbird.nix
     ./nginx.nix
     ./xray.nix
   ];

nixosModules/vds/nginx.nix

@@ -16,6 +16,18 @@ in
       recommendedProxySettings = true;
       recommendedTlsSettings = true;
       virtualHosts = {
+        "node-red.zeroq.ru" = {
+          forceSSL = true;
+          enableACME = true;
+          kTLS = true;
+          locations."/" = {
+            proxyPass = "http://${server}:1880";
+            proxyWebsockets = true;
+          };
+          extraConfig = ''
+            client_max_body_size 5G;
+          '';
+        };
         "flux.zeroq.ru" = {
           forceSSL = true;
           enableACME = true;