diff --git a/modules/nginx.nix b/modules/nginx.nix index 1b2cb5f..8c4cb52 100644 --- a/modules/nginx.nix +++ b/modules/nginx.nix @@ -1,6 +1,7 @@ {inputs, pkgs, config, ...}: { + # Secrets sops.secrets."CF_DNS_API_TOKEN" = { format = "json"; sopsFile = "${inputs.secrets}/mirror/nginx.json"; @@ -16,6 +17,7 @@ CF_ZONE_API_TOKEN="${config.sops.placeholder."CF_ZONE_API_TOKEN"}" ''; + # Security networking.firewall.allowedTCPPorts = [ 80 # http 443 # https @@ -31,6 +33,7 @@ }; }; + # Definitions services.nginx = let services = [ { name = "authentik"; port = "30000"; } @@ -58,7 +61,7 @@ acmeRoot = null; locations."/" = { - proxyPass = "http://10.5.0.2:83"; + proxyPass = "http://vaultwarden"; proxyWebsockets = true; }; };