NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

swap vaultwarden

Browse source
This commit is contained in:
nyxerinys 2026-10-17 23:51:41 -05:00
parent b6117d062b
commit 1a0c20b63a
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/nginx.nix
View file

@ -1,6 +1,7 @@
{inputs, pkgs, config, ...}: {inputs, pkgs, config, ...}:
{ {
# Secrets
sops.secrets."CF_DNS_API_TOKEN" = { sops.secrets."CF_DNS_API_TOKEN" = {
format = "json"; format = "json";
sopsFile = "${inputs.secrets}/mirror/nginx.json"; sopsFile = "${inputs.secrets}/mirror/nginx.json";
@ -16,6 +17,7 @@
CF_ZONE_API_TOKEN="${config.sops.placeholder."CF_ZONE_API_TOKEN"}" CF_ZONE_API_TOKEN="${config.sops.placeholder."CF_ZONE_API_TOKEN"}"
''; '';
# Security
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
80 # http 80 # http
443 # https 443 # https
@ -31,6 +33,7 @@
}; };
}; };
# Definitions
services.nginx = let services.nginx = let
services = [ services = [
{ name = "authentik"; port = "30000"; } { name = "authentik"; port = "30000"; }
@ -58,7 +61,7 @@
acmeRoot = null; acmeRoot = null;
locations."/" = { locations."/" = {
proxyPass = "http://10.5.0.2:83"; proxyPass = "http://vaultwarden";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };