Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l coms proxy: ipforward ports

Browse Source
This commit is contained in:
lassulus 2023-09-03 11:58:42 +02:00
parent ba79c70bbd
commit 77b8c837c5
1 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lass/2configs/services/coms/proxy.nix
View File

@ -21,14 +21,13 @@ in
proxy_pass ${target}:${toString port};
}
'') tcpports}
${lib.concatMapStringsSep "\n" (port: ''
server {
listen ${toString port} udp;
proxy_pass ${target}:${toString port};
}
'') udpports}
'';
krebs.iptables.tables.nat.PREROUTING.rules = lib.flatten (map (port: [
{ predicate = "-p udp --dport ${toString port}"; target = "DNAT --to-destination ${config.krebs.hosts.orange.nets.retiolum.ip4.addr}:${toString port}"; v6 = false; }
{ predicate = "-p udp --dport ${toString port}"; target = "DNAT --to-destination [${config.krebs.hosts.orange.nets.retiolum.ip6.addr}]:${toString port}"; v4 = false; }
]) udpports);
services.nginx.virtualHosts."jitsi.lassul.us" = {
enableACME = true;
acmeFallbackHost = "${target}";
@ -36,7 +35,7 @@ in
locations."/" = {
recommendedProxySettings = true;
proxyWebsockets = true;
proxyPass = "http://${target}";
proxyPass = "https://${target}";
};
};
}