forked from
lass.pds.lassul.us/superconfig
This repository has no description
machines.prism: proxy paste & cyberlocker to neoprism
author
lassulus
date
(Feb 28, 2026, 2:59 PM CET)
commit
c1853765
c1853765ff479b2386dc4396a166f430c67144e5
parent
eae0f18d
eae0f18d550012f5dd1fffc53254b9bbac2dc75e
+35
-7
+35
-7
machines/prism/config.nix
+35
-7
machines/prism/config.nix
···
127
127
../../2configs/binary-cache/server.nix
128
128
../../2configs/binary-cache/proxy.nix
129
129
../../2configs/iodined.nix
130
-
../../2configs/paste.nix
130
+
# paste.nix removed - paste/cyberlocker now runs on neoprism, proxied below
131
131
../../2configs/syncthing.nix
132
132
../../2configs/container-networking.nix
133
133
../../2configs/bgt-bot
···
226
226
227
227
# proxy paste/cyberlocker to neoprism
228
228
services.nginx.virtualHosts."p.krebsco.de" = {
229
-
locations."/".extraConfig = lib.mkForce ''
229
+
enableACME = true;
230
+
addSSL = true;
231
+
serverAliases = [ "p.krebsco.de" ];
232
+
locations."/".extraConfig = ''
230
233
client_max_body_size 4G;
231
234
proxy_set_header Host $host;
232
235
proxy_set_header X-Forwarded-Proto $scheme;
233
236
proxy_pass https://neoprism.lassul.us;
234
237
'';
235
-
locations."/form".extraConfig = lib.mkForce ''
238
+
locations."/form".extraConfig = ''
236
239
client_max_body_size 4G;
237
240
proxy_set_header Host $host;
238
241
proxy_pass https://neoprism.lassul.us;
239
242
'';
240
-
locations."/image".extraConfig = lib.mkForce ''
243
+
locations."/image".extraConfig = ''
241
244
proxy_set_header Host $host;
242
245
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
243
246
proxy_set_header X-Forwarded-Proto $scheme;
244
247
proxy_pass https://neoprism.lassul.us;
245
248
'';
246
-
extraConfig = lib.mkForce ''
249
+
extraConfig = ''
247
250
add_header Access-Control-Allow-Headers Authorization always;
248
251
add_header Access-Control-Allow-Origin * always;
249
252
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS' always;
250
253
'';
251
254
};
252
255
services.nginx.virtualHosts."c.krebsco.de" = {
253
-
locations."/".extraConfig = lib.mkForce ''
256
+
enableACME = true;
257
+
addSSL = true;
258
+
serverAliases = [ "c.krebsco.de" ];
259
+
locations."/".extraConfig = ''
254
260
proxy_set_header Host $host;
255
261
proxy_pass https://neoprism.lassul.us;
256
262
'';
257
-
extraConfig = lib.mkForce ''
263
+
extraConfig = ''
258
264
add_header Access-Control-Allow-Origin * always;
259
265
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS' always;
266
+
'';
267
+
};
268
+
services.nginx.virtualHosts.paste = {
269
+
serverAliases = [ "p.r" ];
270
+
locations."/".extraConfig = ''
271
+
client_max_body_size 4G;
272
+
proxy_set_header Host $host;
273
+
proxy_set_header X-Forwarded-Proto $scheme;
274
+
proxy_pass https://neoprism.lassul.us;
275
+
'';
276
+
locations."/image".extraConfig = ''
277
+
proxy_set_header Host $host;
278
+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
279
+
proxy_set_header X-Forwarded-Proto $scheme;
280
+
proxy_pass https://neoprism.lassul.us;
281
+
'';
282
+
};
283
+
services.nginx.virtualHosts.cyberlocker = {
284
+
serverAliases = [ "c.r" ];
285
+
locations."/".extraConfig = ''
286
+
proxy_set_header Host $host;
287
+
proxy_pass https://neoprism.lassul.us;
260
288
'';
261
289
};
262
290
}