This repository has no description
889 B
28 lines
1{
2 imports = [
3 ../../configs
4 ../../configs/retiolum.nix
5 ../../configs/ssh-redirect.nix
6 ../../configs/autoupdate.nix
7 ../../configs/sigexec/executor.nix
8 ./ipfs.nix
9 ./ipfs-endpoint.nix
10 ];
11
12 # The sigexec dashboard on neoprism reaches this executor over public TLS
13 # (set up before starkstrom had a kartei card; starkstrom.r would work now):
14 # nginx strips /sigexec/ so the executor verifies the same paths the
15 # statements were signed over (/jobs etc).
16 services.nginx.virtualHosts."starkstrom.lassul.us".locations."/sigexec/" = {
17 proxyPass = "http://127.0.0.1:7601/";
18 extraConfig = ''
19 # Long-lived chunked job streams: unbuffered, generous timeouts (logs on
20 # a pending job blocks until approval).
21 proxy_buffering off;
22 proxy_read_timeout 1d;
23 proxy_send_timeout 1d;
24 '';
25 };
26
27 system.stateVersion = "25.11";
28}