oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-11 04:30:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

nginx uuu

Browse Source
This commit is contained in:
Jor Oqyude
2025-08-02 22:24:32 +03:00
parent e380852b65
commit 9d7972a5b3
1 changed files with 32 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/vds/nginx.nix
+32 -47
View File
@@ -15,55 +15,40 @@
recommendedTlsSettings = true; recommendedTlsSettings = true;
virtualHosts = { virtualHosts = {
"immich.zeroq.ru" = { "immich.zeroq.ru" = {
listen = [ forceSSL = true; # Принудительный HTTPS
{ enableACME = true;
addr = "sapphira.laxta-platy.ts.net"; locations."/" = {
port = 2283; proxyPass = "http://sapphira.laxta-platy.ts.net:2283"; # Порт Immich
} proxyWebsockets = true; # Если Immich использует WebSockets
]; };
};
"nextcloud.zeroq.ru" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://sapphira.laxta-platy.ts.net:10000"; # Порт Nextcloud
proxyWebsockets = true;
};
};
"llm.zeroq.ru" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://sapphira.laxta-platy.ts.net:11111"; # Порт Open WebUI
proxyWebsockets = true;
};
}; };
# "vless-sub" = {
# serverName = "${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net";
# listen = [
# {
# addr = "0.0.0.0"; # Tailscale IP вашего VDS
# port = 44444;
# ssl = false;
# }
# {
# addr = "0.0.0.0"; # Tailscale IP вашего VDS
# port = 44443;
# ssl = true;
# }
# ];
# root = "${inputs.zeroq-credentials.paths.vless-subs.root}"; # "${inputs.zeroq-credentials}/services/xray/subs";
# locations."/" = {
# extraConfig = ''
# if ($scheme = http) {
# return 301 https://$host:44443$request_uri;
# }
# '';
# };
# enableACME = true;
# forceSSL = true; # Принудительно HTTPS
# };
}; };
}; };
}; };
# security.acme = { security.acme = {
# acceptTerms = true; acceptTerms = true;
# defaults.email = "oqyude@gmail.com"; # Укажите ваш email defaults.email = "oqyude@gmail.com";
# certs."${inputs.zeroq.devices.vds.hostname}.latxa-platy.ts.net" = { };
# dnsProvider = null; # Tailscale hostname не требует DNS-проверки, если используем HTTP-01 networking.firewall.allowedTCPPorts = [
# webroot = "/var/lib/acme/acme-challenge"; #44443
# extraLegoFlags = [ "--http-01.port=80" ]; #44444
# }; 80
# }; 443
# networking.firewall.allowedTCPPorts = [ ];
# 44443
# 44444
# 80
# ];
} }