Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l neoprism.r: add more services

Browse Source
This commit is contained in:
lassulus 2023-07-08 17:03:10 +02:00
parent bf94b004ef
commit 6ee4f8c1c1
1 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
lass/1systems/neoprism/config.nix
View File

@ -4,6 +4,9 @@
imports = [ imports = [
<stockholm/lass> <stockholm/lass>
<stockholm/lass/2configs/retiolum.nix> <stockholm/lass/2configs/retiolum.nix>
<stockholm/lass/2configs/mail/internet-gateway.nix>
<stockholm/lass/2configs/binary-cache/server.nix>
<stockholm/lass/2configs/matrix.nix>
<stockholm/lass/2configs/gsm-wiki.nix> <stockholm/lass/2configs/gsm-wiki.nix>
# sync-containers # sync-containers
@ -26,7 +29,23 @@
krebs.build.host = config.krebs.hosts.neoprism; krebs.build.host = config.krebs.hosts.neoprism;
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];
services.nginx.enable = true;
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
security.acme.defaults.email = "acme@lassul.us"; security.acme.defaults.email = "acme@lassul.us";
services.nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedTlsSettings = true;
enableReload = true;
virtualHosts.default = {
default = true;
locations."= /etc/os-release".extraConfig = ''
default_type text/plain;
alias /etc/os-release;
'';
locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
};
};
} }