grimhilt/compose-files
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: add nginx-config.nix

Browse Source
This commit is contained in:
grimhilt 2025-04-27 11:26:04 +00:00
parent f9fb2e90cf
commit cb42cd357d
1 changed files with 185 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

185
nginx-config.nix Normal file
View File

@ -0,0 +1,185 @@
{ config, pkgs, ... }:
{
security.acme = {
acceptTerms = true; # accept terms of letsencrypt
defaults.email = "grimhilt@proton.me";
};
services.nginx = {
enable = true;
clientMaxBodySize = "3G";
virtualHosts."domain.com" = {
forceSSL = true;
enableACME = true;
locations."/.well-known/matrix/server" = {
extraConfig = ''
access_log off;
add_header Access-Control-Allow-Origin "*";
add_header Content-Type "application/json";
return 200 '{"m.server": "matrix.domain.com:443"}';
'';
};
locations."/.well-known/matrix/client" = {
extraConfig = ''
access_log off;
add_header Access-Control-Allow-Origin "*";
add_header Content-Type "application/json";
return 200 '{"m.homeserver": {"base_url": "https://matrix.domain.com"}}';
'';
};
locations."/" = {
root = "/var/www/html";
};
};
virtualHosts."git.domain.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:3000";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
'';
};
};
virtualHosts."matrix.domain.com" = {
listen = [
{ addr = "0.0.0.0"; port = 80 ;}
{ addr = "[::]"; port = 80 ;}
{ addr = "0.0.0.0"; port = 443 ; ssl = true; }
{ addr = "[::]"; port = 443 ; ssl = true; }
{ addr = "0.0.0.0"; port = 8448 ; ssl = true; }
{ addr = "[::]"; port = 8448 ; ssl = true; }
] ;
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:8008";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
client_max_body_size 50M;
'';
};
};
virtualHosts."nextcloud.domain.com" = {
forceSSL = true;
enableACME = true;
locations."/".proxyPass = "http://localhost:8010";
extraConfig = ''
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
'';
};
virtualHosts."ntfy.domain.com" = {
enableACME = true;
listen = [
{
addr = "*";
port = 443;
ssl = true;
}
{
addr = "*";
port = 80;
}
];
locations."/" = {
proxyPass = "http://localhost:8011";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection Upgrade;
proxy_read_timeout 90;
proxy_http_version 1.1;
'';
};
};
virtualHosts."home.domain.com" = {
listen = [
{
addr = "*";
port = 443;
ssl = true;
}
{
addr = "*";
port = 80;
}
];
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://192.168.1.120:5500";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection Upgrade;
proxy_read_timeout 90;
proxy_http_version 1.1;
proxy_buffering off;
proxy_buffer_size 16k;
proxy_busy_buffers_size 24k;
proxy_buffers 64 4k;
'';
};
};
virtualHosts."gcc.domain.com" = {
listen = [
{
addr = "*";
port = 443;
ssl = true;
}
{
addr = "*";
port = 80;
}
];
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:9010";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection Upgrade;
proxy_read_timeout 90;
proxy_http_version 1.1;
proxy_buffering off;
proxy_buffer_size 16k;
proxy_busy_buffers_size 24k;
proxy_buffers 64 4k;
'';
};
};
};
}