alyraffauf/nixcfg
1
0
Fork 0
mirror of https://github.com/alyraffauf/nixcfg.git synced 2024-11-25 23:31:54 -05:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity

dded reverse proxy on mauville

Browse source
This commit is contained in:
Aly Raffauf 2024-03-10 23:48:07 -04:00
parent 2f4ab53de9
commit 91c7a503d4
1 changed files with 93 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

105
modules/homelab/default.nix
View file

@ -5,8 +5,11 @@
../virtualization ../virtualization
]; ];
# services.ddclient.enable = true;
# services.ddclient.configFile = "/etc/ddclient/ddclient.conf";
# Open TCP ports for audiobookshelf, plex-server, and transmission-server. # Open TCP ports for audiobookshelf, plex-server, and transmission-server.
networking.firewall.allowedTCPPorts = [ 51413 13378 32400 9091 ]; networking.firewall.allowedTCPPorts = [ 80 443 51413 13378 32400 9091 ];
networking.firewall.allowedUDPPorts = [ 51413 ]; networking.firewall.allowedUDPPorts = [ 51413 ];
virtualisation = { virtualisation = {
@ -47,17 +50,95 @@
"/mnt/Media:/Media" "/mnt/Media:/Media"
]; ];
}; };
# nextcloud = { };
# ports = ["0.0.0.0:80:80" ]; };
# image = "nextcloud:latest";
# environment = { containers.navidrome = {
# TZ = "America/New_York"; autoStart = true;
# }; bindMounts = {
# volumes = [ "/Music" = { hostPath = "/mnt/Media/Music";
# "nextcloud:/var/www/html" isReadOnly = true;
# "/mnt/Media/NextCloud:/var/www/html/data" };
# ]; };
# }; config = { config, pkgs, lib, ... }: {
services.navidrome = {
enable = true;
openFirewall = true;
settings = {
Address = "0.0.0.0";
Port = 4533;
MusicFolder = "/Music";
DefaultTheme = "Auto";
SubsonicArtistParticipations = true;
DefaultDownsamplingFormat = "aac";
};
};
system.stateVersion = "24.05";
};
};
security.acme = {
acceptTerms = true;
defaults.email = "alyraffauf@gmail.com";
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
recommendedGzipSettings = true;
# other Nginx options
virtualHosts."raffauflabs.com" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:12345";
proxyWebsockets = true; # needed if you need to use WebSocket
extraConfig = ''
# required when the target is also TLS server with multiple hosts
proxy_ssl_server_name on;
# required when the server wants to use HTTP Authentication
proxy_pass_header Authorization;
'';
};
};
virtualHosts."podcasts.raffauflabs.com" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:13378";
proxyWebsockets = true; # needed if you need to use WebSocket
extraConfig = ''
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_redirect http:// https://;
proxy_buffering off;
'';
};
};
virtualHosts."plex.raffauflabs.com" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:32400";
proxyWebsockets = true; # needed if you need to use WebSocket
extraConfig = ''
proxy_buffering off;
'';
};
};
virtualHosts."music.raffauflabs.com" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:4533";
proxyWebsockets = true; # needed if you need to use WebSocket
extraConfig = ''
proxy_buffering off;
'';
};
}; };
}; };
} }