This repository has no description
2.0 kB
64 lines
1{ config, pkgs, ... }:
2{
3 krebs.sync-containers3.containers.ubik = {
4 sshKey = "${config.krebs.secret.directory}/ubik.sync.key";
5 startCommand = ''
6 export PATH=$PATH:${pkgs.git}/bin
7 until ${pkgs.dig.host}/bin/host github.com; do sleep 1; done
8 ${pkgs.nixos-rebuild}/bin/nixos-rebuild --refresh --flake github:lassulus/superconfig#ubik switch --no-write-lock-file
9 '';
10 };
11 clanCore.facts.services.ubik-container = {
12 secret."ubik.sync.key" = { };
13 generator.script = ":";
14 generator.prompt = ''
15 copy or reference the secret key from the container into here, so we can actually start/sync the container
16 '';
17 };
18 containers.ubik.bindMounts."/var/lib" = {
19 hostPath = "/var/lib/sync-containers3/ubik/state";
20 isReadOnly = false;
21 };
22 containers.ubik.bindMounts."/var/lib/nextcloud/data" = {
23 hostPath = "/var/ubik";
24 isReadOnly = false;
25 };
26 services.nginx.virtualHosts."c.apanowicz.de" = {
27 enableACME = true;
28 acmeFallbackHost = "ubik.r";
29 forceSSL = true;
30 locations."/" = {
31 recommendedProxySettings = true;
32 proxyWebsockets = true;
33 proxyPass = "https://ubik.r";
34 extraConfig = ''
35 client_max_body_size 9001M;
36 # fix abort after 1GB download
37 # https://trac.nginx.org/nginx/ticket/1472
38 proxy_max_temp_file_size 0;
39 '';
40 };
41 };
42 # services.nginx.virtualHosts."mail.ubikmedia.eu" = {
43 # enableACME = true;
44 # forceSSL = true;
45 # acmeFallbackHost = "ubik.r";
46 # locations."/" = {
47 # recommendedProxySettings = true;
48 # proxyWebsockets = true;
49 # proxyPass = "https://ubik.r";
50 # };
51 # };
52
53 services.nginx.virtualHosts."karlaskop.de" = {
54 serverAliases = [ "www.karlaskop.de" ];
55 enableACME = true;
56 forceSSL = true;
57 acmeFallbackHost = "prism.r";
58 locations."/" = {
59 recommendedProxySettings = true;
60 proxyWebsockets = true;
61 proxyPass = "https://prism.r";
62 };
63 };
64}