diff options
| author | Grigory Shipunov | 2023-01-24 20:40:41 +0100 |
|---|---|---|
| committer | Grigory Shipunov | 2023-01-24 20:40:41 +0100 |
| commit | b5d95071571de62aa62783c65e8cf7ecc487d162 (patch) | |
| tree | 3806269067604dc4e74c63a00cacd8d630a7bb51 /hosts/cirrus | |
| parent | 3b53f3b8a9d78203bf506d6d49975f61f33a052d (diff) | |
music: init
Diffstat (limited to 'hosts/cirrus')
| -rw-r--r-- | hosts/cirrus/nextcloud-proxy.nix | 38 | ||||
| -rw-r--r-- | hosts/cirrus/wireguard-server.nix | 8 |
2 files changed, 38 insertions, 8 deletions
diff --git a/hosts/cirrus/nextcloud-proxy.nix b/hosts/cirrus/nextcloud-proxy.nix index 647d29f..11fc5ed 100644 --- a/hosts/cirrus/nextcloud-proxy.nix +++ b/hosts/cirrus/nextcloud-proxy.nix @@ -16,15 +16,15 @@ sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL"; }; - services.nginx.virtualHosts."nc.oxapentane.com" = { - enableACME = true; - forceSSL = true; - extraConfig = '' + services.nginx.virtualHosts = { + "nc.oxapentane.com" = { + enableACME = true; + forceSSL = true; + extraConfig = '' client_max_body_size 512M; - ''; - locations = { - "/" = { - # extraConfig = '' return 503; ''; + ''; + locations = { + "/" = { proxyPass = "http://10.34.45.100:8080"; }; "/well-known/carddav" = { @@ -33,7 +33,29 @@ "/well-known/caldav" = { return = "301 $scheme://$host/remote.php/dav"; }; + }; + }; + "music.oxapentane.com" = { + enableACME = true; + forceSSL = true; + extraConfig = '' + client_max_body_size 32M; + ''; + locations = { + "/" = { + proxyPass = "http://10.34.45.101:4533"; + extraConfig = '' + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-Protocol $scheme; + proxy_set_header X-Forwarded-Host $http_host; + proxy_buffering off; + ''; + }; }; }; +}; } diff --git a/hosts/cirrus/wireguard-server.nix b/hosts/cirrus/wireguard-server.nix index ee4cf60..45c3dcb 100644 --- a/hosts/cirrus/wireguard-server.nix +++ b/hosts/cirrus/wireguard-server.nix @@ -66,6 +66,14 @@ PersistentKeepalive = 25; }; } + # music + { + wireguardPeerConfig = { + PublicKey = "vQNkp51S9qLsu97dLPj0/EqFwvVtRFZpMHufgKhxum0="; + AllowedIPs = [ "10.34.45.101/32" ]; + PersistentKeepalive = 25; + }; + } ]; }; networks."oxaproxy" = { |