chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2026-01-12 04:59:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

整理 nginx config

Browse Source
This commit is contained in:
陈浩南
2023-08-13 21:15:10 +08:00
parent 589194cce8
commit 56d53876be
1 changed files with 17 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
modules/services/default.nix
View File

@@ -824,6 +824,20 @@ inputs:
proxy_buffer_size 128k;
}
'';
virtualHosts = listToAttrs (map
(site:
{
inherit (site) name;
value =
{
serverName = site.name;
listen = [{ addr = "127.0.0.1"; port = 443; ssl = true; } { addr = "0.0.0.0"; port = 80; } ];
useACMEHost = site.name;
locations."/".proxyPass = site.value.upstream;
forceSSL = site.value.rewriteHttps;
};
})
(attrsToList services.nginx.httpProxy));
recommendedZstdSettings = true;
recommendedTlsSettings = true;
recommendedProxySettings = true;
@@ -906,33 +920,10 @@ inputs:
};
};
networking.firewall.allowedTCPPorts = [ 443 ];
}
)
(
mkIf (services.nginx.httpProxy != {})
{
services.nginx.virtualHosts = listToAttrs (map
(site:
{
inherit (site) name;
value =
{
serverName = site.name;
listen = [{ addr = "127.0.0.1"; port = 443; ssl = true; } { addr = "0.0.0.0"; port = 80; } ];
useACMEHost = site.name;
locations."/".proxyPass = site.value.upstream;
forceSSL = site.value.rewriteHttps;
};
})
(attrsToList services.nginx.httpProxy));
nixos.services =
nixos.services.acme =
{
nginx.enable = true;
acme =
{
enable = true;
certs = attrNames services.nginx.httpProxy;
};
enable = true;
certs = attrNames services.nginx.httpProxy;
};
security.acme.certs = listToAttrs (map
(cert: { name = cert; value.group = inputs.config.services.nginx.group; })