nginx uuu

modules/vds/nginx.nix

@@ -15,55 +15,40 @@
       recommendedTlsSettings = true;
       virtualHosts = {
         "immich.zeroq.ru" = {
-          listen = [
+          forceSSL = true; # Принудительный HTTPS
-            {
+          enableACME = true;
-              addr = "sapphira.laxta-platy.ts.net";
+          locations."/" = {
-              port = 2283;
+            proxyPass = "http://sapphira.laxta-platy.ts.net:2283"; # Порт Immich
-            }
+            proxyWebsockets = true; # Если Immich использует WebSockets
-          ];
           };
-        # "vless-sub" = {
+        };
-
+        "nextcloud.zeroq.ru" = {
-        #   serverName = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net";
+          forceSSL = true;
-        #   listen = [
+          enableACME = true;
-        #     {
+          locations."/" = {
-        #       addr = "0.0.0.0"; # Tailscale IP вашего VDS
+            proxyPass = "http://sapphira.laxta-platy.ts.net:10000"; # Порт Nextcloud
-        #       port = 44444;
+            proxyWebsockets = true;
-        #       ssl = false;
+          };
-        #     }
+        };
-        #     {
+        "llm.zeroq.ru" = {
-        #       addr = "0.0.0.0"; # Tailscale IP вашего VDS
+          forceSSL = true;
-        #       port = 44443;
+          enableACME = true;
-        #       ssl = true;
+          locations."/" = {
-        #     }
+            proxyPass = "http://sapphira.laxta-platy.ts.net:11111"; # Порт Open WebUI
-        #   ];
+            proxyWebsockets = true;
-        #   root = "${inputs.zeroq-credentials.paths.vless-subs.root}"; # "${inputs.zeroq-credentials}/services/xray/subs";
-        #   locations."/" = {
-        #     extraConfig = ''
-        #       if ($scheme = http) {
-        #         return 301 https://$host:44443$request_uri;
-        #       }
-        #     '';
-        #   };
-        #   enableACME = true;
-        #   forceSSL = true; # Принудительно HTTPS
-
-        # };
           };
         };
       };
-  # security.acme = {
+    };
-  #   acceptTerms = true;
+  };
-  #   defaults.email = "oqyude@gmail.com"; # Укажите ваш email
+  security.acme = {
-  #   certs."${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net" = {
+    acceptTerms = true;
-  #     dnsProvider = null; # Tailscale hostname не требует DNS-проверки, если используем HTTP-01
+    defaults.email = "oqyude@gmail.com";
-  #     webroot = "/var/lib/acme/acme-challenge";
+  };
-  #     extraLegoFlags = [ "--http-01.port=80" ];
+  networking.firewall.allowedTCPPorts = [
-  #   };
-  # };
-  # networking.firewall.allowedTCPPorts = [
     #44443
     #44444
-  #   80
+    80
-  # ];
+    443
+  ];
 }