+7

2configs/paste.nix

View file Reviewed

··· 10 10 imports = [ 11 11 self.inputs.stockholm.nixosModules.htgen 12 12 ]; 13 13 + 14 14 + security.acme.certs."cyberlocker".server = config.krebs.ssl.acmeURL; 15 15 + security.acme.certs."paste".server = config.krebs.ssl.acmeURL; 13 16 services.nginx.virtualHosts.cyberlocker = { 17 17 + enableACME = true; 18 18 + addSSL = true; 14 19 serverAliases = [ "c.r" ]; 15 20 locations."/".extraConfig = '' 16 21 client_max_body_size 4G; ··· 23 28 ''; 24 29 }; 25 30 services.nginx.virtualHosts.paste = { 31 31 + enableACME = true; 32 32 + addSSL = true; 26 33 serverAliases = [ "p.r" ]; 27 34 locations."/".extraConfig = '' 28 35 client_max_body_size 4G;

+4

2configs/services/radio/default.nix

View file Reviewed

··· 308 308 ''; 309 309 }; 310 310 311 311 + security.acme.certs."radio.r".server = config.krebs.ssl.acmeURL; 312 312 + 311 313 networking.firewall.allowedTCPPorts = [ 80 ]; 312 314 services.nginx = { 313 315 enable = true; 314 316 virtualHosts."radio.r" = { 317 317 + enableACME = true; 318 318 + addSSL = true; 315 319 locations."/".extraConfig = '' 316 320 # https://github.com/aswild/icecast-notes#core-nginx-config 317 321 proxy_pass http://localhost:8000;

+4

2configs/services/radio/news.nix

View file Reviewed

··· 59 59 }; 60 60 }; 61 61 62 62 + security.acme.certs."radio-news.r".server = config.krebs.ssl.acmeURL; 63 63 + 62 64 services.nginx.virtualHosts."radio-news.r" = { 65 65 + enableACME = true; 66 66 + addSSL = true; 63 67 locations."/" = { 64 68 proxyPass = "http://localhost:7999"; 65 69 proxyWebsockets = true;