nix-deploy/config/hosts/grondahl/services/nginx.nix

42 lines
1.3 KiB
Nix
Raw Normal View History

2021-09-23 16:45:06 +02:00
{
2021-09-27 14:55:55 +02:00
imports = [ ../../../common/services/nginx.nix ];
services.nginx.virtualHosts = {
"anarkafem.dev" = {
useACMEHost = "anarkafem.dev";
forceSSL = true;
locations."/".root = "/var/www/anarkafem.dev/public";
locations."/_matrix/".proxyPass = "http://127.0.0.1:8008";
2021-11-18 16:12:46 +01:00
locations."/_synapse".proxyPass = "http://127.0.0.1:8008";
2021-09-27 14:55:55 +02:00
locations."/.well-known/matrix/" = {
root = "/var/www/matrix/public";
extraConfig = ''
default_type application/json;
add_header Access-Control-Allow-Origin "*";
add_header Strict-Transport-Security $hsts_header;
add_header Referrer-Policy "origin-when-cross-origin";
add_header X-Frame-Options "DENY";
add_header X-Content-Type-Options "nosniff";
add_header X-XSS-Protection "1; mode=block";
'';
2021-09-23 16:45:06 +02:00
};
};
2022-02-14 12:29:36 +01:00
"cal.anarkafem.dev" = {
useACMEHost = "anarkafem.dev";
forceSSL = true;
locations."/".proxyPass = "http://127.0.0.1:4000";
};
"auth.anarkafem.dev" = {
useACMEHost = "anarkafem.dev";
forceSSL = true;
locations."/".proxyPass = "http://127.0.0.1:9000";
};
"beanz.one" = {
2022-02-27 17:39:59 +01:00
forceSSL = true;
enableACME = true;
locations."/" = {
root = "/var/www/beanz.one/public";
};
};
2021-09-23 16:45:06 +02:00
};
}