mirror of
https://github.com/oqyude/nixos.git
synced 2026-06-10 20:20:41 +03:00
232 lines
6.3 KiB
Nix
232 lines
6.3 KiB
Nix
{
|
|
config,
|
|
inputs,
|
|
pkgs,
|
|
...
|
|
}:
|
|
let
|
|
server = "100.64.0.0";
|
|
in
|
|
{
|
|
environment.etc."nginx/pubray".text = inputs.zeroq-credentials.services.xray.auth;
|
|
users.users.nginx.extraGroups = [ "acme" ];
|
|
services = {
|
|
nginx = {
|
|
enable = true;
|
|
recommendedGzipSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedProxySettings = true;
|
|
recommendedTlsSettings = true;
|
|
appendHttpConfig = inputs.zeroq-credentials.services.xray.maps;
|
|
virtualHosts = {
|
|
# "pubray.zeroq.ru" = {
|
|
# enableACME = true;
|
|
# forceSSL = true;
|
|
# root = "${inputs.zeroq-credentials.services.xray.subs}";
|
|
# locations."/" = {
|
|
# extraConfig = ''
|
|
# auth_basic "Restricted";
|
|
# auth_basic_user_file /etc/nginx/pubray;
|
|
|
|
# if ($subfile = "") { return 403; }
|
|
# rewrite ^/$ $subfile break;
|
|
# '';
|
|
# };
|
|
# };
|
|
"x.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations = {
|
|
"/" = {
|
|
proxyPass = "http://localhost:2049";
|
|
proxyWebsockets = true;
|
|
};
|
|
"/subs/" = {
|
|
proxyPass = "http://localhost:2096";
|
|
proxyWebsockets = true;
|
|
};
|
|
"/subsjs/" = {
|
|
proxyPass = "http://localhost:2096";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
};
|
|
"kuma.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:4001";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
"health.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:19999";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
"agent.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:3000";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
# "node-red.zeroq.ru" = {
|
|
# forceSSL = true;
|
|
# enableACME = true;
|
|
# kTLS = true;
|
|
# locations."/" = {
|
|
# proxyPass = "http://${server}:1880";
|
|
# proxyWebsockets = true;
|
|
# };
|
|
# extraConfig = ''
|
|
# client_max_body_size 5G;
|
|
# '';
|
|
# };
|
|
"zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
root = pkgs.writeTextDir "index.html" ''
|
|
<!doctype html>
|
|
<html>
|
|
<body>
|
|
<pre>What are you doing here?</pre>
|
|
</body>
|
|
</html>
|
|
'';
|
|
locations = {
|
|
"/guest/" = {
|
|
proxyPass = "http://${server}:80";
|
|
proxyWebsockets = true;
|
|
};
|
|
# "/.well-known/discord" = {
|
|
# extraConfig = ''
|
|
# default_type text/plain;
|
|
# return 200 "dh=c2d103553a4cfdaa1b7952a87a7d8120a1e167cc";
|
|
# '';
|
|
# };
|
|
};
|
|
};
|
|
"flux.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:6061";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
"n8n.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:5678";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
"office.zeroq.ru" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations = {
|
|
"/" = {
|
|
proxyPass = "http://${server}:8000"; # 9980
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
extraConfig = ''
|
|
client_max_body_size 5G;
|
|
|
|
proxy_http_version 1.1;
|
|
proxy_buffering off;
|
|
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Authorization $http_authorization;
|
|
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
''; # absolute_redirect off;
|
|
};
|
|
"immich.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:2283";
|
|
proxyWebsockets = true;
|
|
};
|
|
extraConfig = ''
|
|
client_max_body_size 5G;
|
|
'';
|
|
};
|
|
"nextcloud.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations = {
|
|
"/" = {
|
|
proxyPass = "http://${server}:10000";
|
|
proxyWebsockets = true;
|
|
};
|
|
"/whiteboard" = {
|
|
proxyPass = "http://${server}:3002";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
extraConfig = ''
|
|
client_max_body_size 5G;
|
|
'';
|
|
};
|
|
"calibre.zeroq.ru" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://${server}:8083";
|
|
proxyWebsockets = true;
|
|
};
|
|
extraConfig = ''
|
|
client_max_body_size 5G;
|
|
'';
|
|
};
|
|
# "pdf.zeroq.ru" = {
|
|
# forceSSL = true;
|
|
# enableACME = true;
|
|
# locations."/" = {
|
|
# proxyPass = "http://${server}:6060";
|
|
# proxyWebsockets = true;
|
|
# };
|
|
# extraConfig = ''
|
|
# client_max_body_size 5G;
|
|
# '';
|
|
# };
|
|
# "ai.zeroq.ru" = {
|
|
# forceSSL = true;
|
|
# enableACME = true;
|
|
# locations."/" = {
|
|
# proxyPass = "http://${server}:11112";
|
|
# proxyWebsockets = true;
|
|
# };
|
|
# extraConfig = ''
|
|
# client_max_body_size 5G;
|
|
# '';
|
|
# };
|
|
};
|
|
};
|
|
};
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults = {
|
|
email = "go.bin043120@gmail.com";
|
|
};
|
|
};
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
}
|