AtaraxiaDev/nixos-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

move some services from dead hypervisor to workstation

Browse Source
This commit is contained in:
Dmitriy Kholkin 2024-07-16 15:17:39 +03:00
parent b93b832776
commit 48dc867a94
Signed by: AtaraxiaDev
GPG Key ID: FD266B810DF48DF2
2 changed files with 87 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
machines/AMD-Workstation/default.nix
View File

@ -20,6 +20,25 @@
customProfiles.ollama
customProfiles.ccache
customProfiles.acme
customProfiles.media-stack
customProfiles.tinyproxy
./nginx.nix
../Home-Hypervisor/usb-hdd.nix
];
networking.extraHosts = ''
127.0.0.1 jackett.ataraxiadev.com
127.0.0.1 jellyfin.ataraxiadev.com
127.0.0.1 kavita.ataraxiadev.com
127.0.0.1 lidarr.ataraxiadev.com
127.0.0.1 medusa.ataraxiadev.com
127.0.0.1 qbit.ataraxiadev.com
127.0.0.1 radarr.ataraxiadev.com
127.0.0.1 recyclarr.ataraxiadev.com
127.0.0.1 sonarr.ataraxiadev.com
'';
security.pki.certificateFiles = [ ../../misc/mitmproxy-ca-cert.pem ];
virtualisation.libvirt.guests = {

68
machines/AMD-Workstation/nginx.nix Normal file
View File

@ -0,0 +1,68 @@
{ ... }:
{
services.nginx = {
enable = true;
group = "acme";
recommendedBrotliSettings = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedTlsSettings = true;
recommendedZstdSettings = true;
clientMaxBodySize = "250m";
commonHttpConfig = ''
proxy_hide_header X-Frame-Options;
'';
virtualHosts = let
default = {
useACMEHost = "ataraxiadev.com";
enableACME = false;
forceSSL = true;
};
proxySettings = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
'';
in {
"media-stack" = {
serverAliases = [
"jellyfin.ataraxiadev.com"
"qbit.ataraxiadev.com"
"prowlarr.ataraxiadev.com"
"jackett.ataraxiadev.com"
"sonarr.ataraxiadev.com"
"radarr.ataraxiadev.com"
"lidarr.ataraxiadev.com"
"kavita.ataraxiadev.com"
];
locations."/" = {
proxyPass = "http://127.0.0.1:8180";
proxyWebsockets = true;
extraConfig = ''
proxy_buffer_size 128k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;
send_timeout 15m;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 15m;
'' + proxySettings;
};
} // default;
"medusa.ataraxiadev.com" = {
locations."/" = {
proxyPass = "http://127.0.0.1:8180";
proxyWebsockets = true;
extraConfig = ''
add_header Content-Security-Policy "upgrade-insecure-requests";
'' + proxySettings;
};
} // default;
};
};
networking.firewall.allowedTCPPorts = [ 80 443 ];
}