Commit 6f538355c676

Vincent Demeester <vincent@sbr.pm>
2022-04-15 12:19:10
systems: trying something with kerkouane and wakasu
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent 4144f54
Changed files (2)
systems/hosts/kerkouane.nix
@@ -178,6 +178,15 @@ in
         locations."/" = { proxyPass = "http://127.0.0.1:8080"; };
         extraConfig = nginxExtraConfig;
       };
+      virtualHosts."whoami.sbr.pm" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxy_set_header = "Host            $host";
+          proxy_set_header = "X-Forwarded-For $remote_addr";
+          proxyPass = "http://10.100.0.8:80";
+        };
+      };
       virtualHosts."sbr.pm" = {
         enableACME = true;
         forceSSL = true;
systems/hosts/wakasu.nix
@@ -94,6 +94,21 @@ in
       endpointPort = endpointPort;
       endpointPublicKey = endpointPublicKey;
     };
+    nginx = {
+      enable = true;
+      recommendedGzipSettings = true;
+      recommendedTlsSettings = true;
+      recommendedOptimisation = true;
+      virtualHosts."whoami.sbr.pm" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxy_set_header = "Host            $host";
+          proxy_set_header = "X-Forwarded-For $remote_addr";
+          proxyPass = "http://192.168.1.187:80";
+        };
+      };
+    };
   };
 
   # Move this to a "builder" role