mirror of
https://github.com/oqyude/nixos.git
synced 2026-06-11 12:40:44 +03:00
107 lines
2.9 KiB
Nix
Executable File
107 lines
2.9 KiB
Nix
Executable File
{
|
|
config,
|
|
inputs,
|
|
...
|
|
}:
|
|
let
|
|
server = "100.64.0.0";
|
|
in
|
|
{
|
|
users.users.nginx.extraGroups = [ "acme" ];
|
|
services = {
|
|
nginx = {
|
|
enable = true;
|
|
recommendedGzipSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedProxySettings = true;
|
|
recommendedTlsSettings = true;
|
|
virtualHosts = {
|
|
"immich.zeroq.ru" = {
|
|
# 31.57.105.253
|
|
listen = [
|
|
{
|
|
addr = "0.0.0.0";
|
|
port = 80;
|
|
}
|
|
{
|
|
addr = "0.0.0.0";
|
|
port = 443;
|
|
ssl = true;
|
|
}
|
|
];
|
|
#forceSSL = true;
|
|
addSSL = true;
|
|
enableACME = true;
|
|
locations = {
|
|
"/" = {
|
|
proxyPass = "http://${server}:2283"; # Порт Immich
|
|
proxyWebsockets = true; # Если Immich использует WebSockets
|
|
};
|
|
};
|
|
# locations."/.well-known/acme-challenge" = {
|
|
# root = "/var/www/acme/acme-challenge";
|
|
# };
|
|
};
|
|
# "nextcloud.zeroq.ru" = {
|
|
# addSSL = true;
|
|
# forceSSL = false;
|
|
# enableACME = false;
|
|
# locations."/" = {
|
|
# proxyPass = "http://${server}:10000"; # Порт Nextcloud
|
|
# proxyWebsockets = true;
|
|
# };
|
|
# };
|
|
# "llm.zeroq.ru" = {
|
|
# addSSL = true;
|
|
# enableACME = true;
|
|
# locations."/" = {
|
|
# proxyPass = "http://atoridu.laxta-platy.ts.net:11111"; # Порт Open WebUI
|
|
# proxyWebsockets = true;
|
|
# };
|
|
# };
|
|
};
|
|
};
|
|
# blocky = {
|
|
# enable = true;
|
|
# settings = {
|
|
# ports.dns = 53; # Port for incoming DNS Queries.
|
|
# upstreams.groups.default = [
|
|
# "https://dns.quad9.net/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries.
|
|
# ];
|
|
# # For initially solving DoH/DoT Requests when no system Resolver is available.
|
|
# bootstrapDns = {
|
|
# upstream = "https://dns.quad9.net/dns-query";
|
|
# ips = [ "9.9.9.9" ];
|
|
# };
|
|
# # Custom DNS entries
|
|
# customDNS = {
|
|
# mapping = {
|
|
# "immich.zeroq.ru" = "100.90.0.0";
|
|
# };
|
|
# };
|
|
# };
|
|
# };
|
|
};
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults = {
|
|
email = "oqyude@gmail.com";
|
|
#webroot = "/var/lib/acme/acme-challenge";
|
|
#group = config.services.nginx.group;
|
|
#server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
|
#listenHTTP = ":1360";
|
|
};
|
|
# certs."immich.zeroq.ru" = {
|
|
# email = "go.bin043120@gmail.com";
|
|
# dnsProvider = "cloudflare";
|
|
# dnsResolver = "1.1.1.1";
|
|
# environmentFile = "${inputs.zeroq-credentials}/accounts/cloudflare.txt";
|
|
# webroot = null; # Required in my case
|
|
# };
|
|
};
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
}
|