summaryrefslogtreecommitdiff
path: root/hosts/cloud/proxy/auth.nix
diff options
context:
space:
mode:
authorGrisha Shipunov2025-06-11 19:25:44 +0200
committerGrisha Shipunov2025-06-11 20:36:08 +0200
commitb2a00d0006bf4aac8bce9f404112e682c0015430 (patch)
treef5e931c469f90123be45b1181b378aa08576cf13 /hosts/cloud/proxy/auth.nix
parentf9ff89e13e86be30a2d65ad707ac3b7d0697c869 (diff)
nginx->caddy
Diffstat (limited to 'hosts/cloud/proxy/auth.nix')
-rw-r--r--hosts/cloud/proxy/auth.nix36
1 files changed, 0 insertions, 36 deletions
diff --git a/hosts/cloud/proxy/auth.nix b/hosts/cloud/proxy/auth.nix
deleted file mode 100644
index c8700f0..0000000
--- a/hosts/cloud/proxy/auth.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-{ ... }:
-{
- services.nginx.upstreams.authentik = {
- servers = {
- "10.89.88.11:9000" = { };
- "[fd31:185d:722f::11]:9000" = { };
- };
- extraConfig = ''
- keepalive 10;
- '';
- };
-
- services.nginx.virtualHosts."auth.oxapentane.com" = {
- forceSSL = true;
- enableACME = true;
- locations."/" = {
- proxyPass = "http://authentik";
- extraConfig = ''
- # general proxy settings
- proxy_connect_timeout 60s;
- proxy_send_timeout 60s;
- proxy_read_timeout 60s;
- proxy_http_version 1.1;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header X-Forwarded-Host $host;
- proxy_set_header X-Forwarded-Server $host;
- # authentik specifik
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection $connection_upgrade_keepalive;
- '';
- };
- };
-}