lass.pds.lassul.us / superconfig
This repository has no description
0
Fork 1

Configure Feed

Select the types of activity you want to include in your feed.

configs: drop ACME certificates for retiolum names

Let's Encrypt refuses .r names and the vhosts on ca.r keep failing to
renew, so serve paste/cyberlocker (c.r, p.r), radio.r, radio-news.r and
yellow's flix vhosts over plain http instead.

author
lassulus date (Oct 7, 2026, 1:35 AM CEST) commit 36b94fab parent 37aeac1f
-26
-4
configs/paste.nix
··· 26 26 { 27 27 28 28 services.nginx.virtualHosts.cyberlocker = { 29 - enableACME = true; 30 - addSSL = true; 31 29 serverAliases = [ "c.r" ]; 32 30 locations."/".extraConfig = '' 33 31 client_max_body_size 4G; ··· 40 38 ''; 41 39 }; 42 40 services.nginx.virtualHosts.paste = { 43 - enableACME = true; 44 - addSSL = true; 45 41 serverAliases = [ "p.r" ]; 46 42 locations."/".extraConfig = '' 47 43 client_max_body_size 4G;
-12
configs/services/flix/default.nix
··· 246 246 247 247 security.acme.defaults.email = "spam@krebsco.de"; 248 248 security.acme.acceptTerms = true; 249 - security.acme.certs."yellow.r".server = config.krebs.ssl.acmeURL; 250 - security.acme.certs."radar.r".server = config.krebs.ssl.acmeURL; 251 - security.acme.certs."sonar.r".server = config.krebs.ssl.acmeURL; 252 - security.acme.certs."transmission.r".server = config.krebs.ssl.acmeURL; 253 249 services.nginx = { 254 250 enable = true; 255 251 package = pkgs.nginx.override { ··· 260 256 virtualHosts."yellow.r" = { 261 257 serverAliases = [ "flix.r" ]; 262 258 default = true; 263 - enableACME = true; 264 - addSSL = true; 265 259 locations."/" = { 266 260 root = "/var/download"; 267 261 extraConfig = '' ··· 284 278 ''; 285 279 }; 286 280 virtualHosts."transmission.r" = { 287 - enableACME = true; 288 - addSSL = true; 289 281 locations."/" = { 290 282 proxyWebsockets = true; 291 283 proxyPass = "http://128.0.0.1:9091"; 292 284 }; 293 285 }; 294 286 virtualHosts."radar.r" = { 295 - enableACME = true; 296 - addSSL = true; 297 287 locations."/" = { 298 288 proxyWebsockets = true; 299 289 proxyPass = "http://localhost:7878"; 300 290 }; 301 291 }; 302 292 virtualHosts."sonar.r" = { 303 - enableACME = true; 304 - addSSL = true; 305 293 locations."/" = { 306 294 proxyWebsockets = true; 307 295 proxyPass = "http://localhost:8989";
-5
configs/services/radio/default.nix
··· 1 1 { 2 2 self, 3 - config, 4 3 pkgs, 5 4 lib, 6 5 ... ··· 230 229 ''; 231 230 }; 232 231 233 - security.acme.certs."radio.r".server = config.krebs.ssl.acmeURL; 234 - 235 232 networking.firewall.allowedTCPPorts = [ 236 233 80 237 234 8000 ··· 239 236 services.nginx = { 240 237 enable = true; 241 238 virtualHosts."radio.r" = { 242 - enableACME = true; 243 - addSSL = true; 244 239 locations."/".extraConfig = '' 245 240 # https://github.com/aswild/icecast-notes#core-nginx-config 246 241 proxy_pass http://localhost:8000;
-5
configs/services/radio/news.nix
··· 1 1 { 2 2 self, 3 - config, 4 3 pkgs, 5 4 ... 6 5 }: ··· 66 65 }; 67 66 }; 68 67 69 - security.acme.certs."radio-news.r".server = config.krebs.ssl.acmeURL; 70 - 71 68 services.nginx.virtualHosts."radio-news.r" = { 72 - enableACME = true; 73 - addSSL = true; 74 69 locations."/" = { 75 70 proxyPass = "http://localhost:7999"; 76 71 proxyWebsockets = true;