This repository has no description
1.5 kB
57 lines
1{ self, config, lib, pkgs, ... }:
2
3{
4 imports = [
5 ../../2configs/retiolum.nix
6 ../../2configs/mail/internet-gateway.nix
7 ../../2configs/binary-cache/server.nix
8 # ../../2configs/matrix.nix
9 ../../2configs/gsm-wiki.nix
10 ../../2configs/monitoring/telegraf.nix
11
12 # sync-containers
13 ../../2configs/consul.nix
14 ../../2configs/services/flix/container-host.nix
15 ../../2configs/services/radio/container-host.nix
16 ../../2configs/ubik-host.nix
17 ../../2configs/orange-host.nix
18 (self.inputs.stockholm + "/krebs/2configs/hotdog-host.nix")
19
20 # other containers
21 ../../2configs/riot.nix
22
23 # proxying of services
24 ../../2configs/services/radio/proxy.nix
25 ../../2configs/services/flix/proxy.nix
26 ../../2configs/services/coms/jitsi.nix
27
28 # dns
29 ../../2configs/dns/knot.nix
30
31 # debug stuff
32 ../../2configs/websites/mergebot.lassul.us.nix
33 ];
34
35 krebs.build.host = config.krebs.hosts.neoprism;
36
37 networking.firewall.allowedTCPPorts = [ 80 443 ];
38 security.acme.acceptTerms = true;
39 security.acme.defaults.email = "acme@lassul.us";
40 services.nginx = {
41 enable = true;
42 recommendedGzipSettings = true;
43 recommendedOptimisation = true;
44 recommendedTlsSettings = true;
45
46 enableReload = true;
47
48 virtualHosts.default = {
49 default = true;
50 locations."= /etc/os-release".extraConfig = ''
51 default_type text/plain;
52 alias /etc/os-release;
53 '';
54 locations."~ ^/.well-known/acme-challenge/".root = "/var/lib/acme/acme-challenge";
55 };
56 };
57}