nixos-config/config/services/reverse-proxy.nix

30 lines
874 B
Nix

{ config, ... }: {
services.nginx.virtualHosts."hydra.chir.rs" = {
sslCertificate = "/var/lib/acme/chir.rs/cert.pem";
sslCertificateKey = "/var/lib/acme/chir.rs/key.pem";
locations."/" = {
proxyPass = "https://hydra.int.chir.rs";
proxyWebsockets = true;
};
extraConfig = ''
proxy_ssl_server_name on;
proxy_ssl_name $host;
'';
};
services.nginx.virtualHosts."mastodon.chir.rs" = {
root = "${config.services.mastodon.package}/public/";
sslCertificate = "/var/lib/acme/chir.rs/cert.pem";
sslCertificateKey = "/var/lib/acme/chir.rs/key.pem";
locations."/" = {
tryFiles = "$uri @proxy";
};
locations."@proxy" = {
proxyPass = "http://mastodon.int.chir.rs";
proxyWebsockets = true;
};
extraConfig = ''
proxy_ssl_server_name on;
proxy_ssl_name $host;
'';
};
}