move around

2024-03-28 14:55:31 +01:00
parent 6b1f2cf9de
commit 9b088ec40a
17 changed files with 79 additions and 78 deletions
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -0,0 +1,86 @@
+{ pkgs, ... }:
+{
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
+    networking.firewall.allowedUDPPorts = [ 80 443 ];
+
+    systemd.tmpfiles.rules = [
+        "d /data 0770 github-actions-runner nginx -"
+        "d /data/website 0770 github-actions-runner nginx -"
+    ];
+
+    services.nginx = {
+        enable = true;
+        package = pkgs.nginxQuic;
+
+        # Use recommended settings
+        recommendedGzipSettings = true;
+        recommendedOptimisation = true;
+        recommendedProxySettings = true;
+        recommendedTlsSettings = true;
+
+        # Only allow PFS-enabled ciphers with AES256
+            sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
+
+        # Setup Nextcloud virtual host to listen on ports
+        virtualHosts = {
+            "kopatz.ddns.net" = {
+                #serverAliases = [
+                #    "www.kopatz.ddns.net"
+                #    "server.home"
+                #    "server.home.arpa"
+                #    "192.168.0.6"
+                #];
+                root = "/data/website";
+                forceSSL = true;
+                enableACME = true;
+                quic = true;
+                http3 = true;
+                locations."~* \\.(jpg)$".extraConfig= ''
+                    add_header Access-Control-Allow-Origin *;
+                '';
+                locations."~ ^/(stash|resources|css)".extraConfig=''
+                	client_max_body_size    5000M;
+                	proxy_redirect          off;
+                	proxy_set_header        Host $host;
+                	proxy_set_header        X-Real-IP $remote_addr;
+                	proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
+                	proxy_set_header        X-Forwarded-Proto $scheme;
+                	proxy_set_header        X-NginX-Proxy true;
+                	proxy_pass http://localhost:5091;
+                '';
+		locations."/tracker-site" = {
+                    tryFiles = "$uri $uri/ /tracker-site/index.html =404";
+		};
+                locations."/tracker-site/api" = {
+                    extraConfig =''
+                        rewrite /tracker-site/api/(.*) /$1 break;
+                    '';
+                    proxyPass = "http://127.0.0.1:8080";
+                };
+            };
+            #discord bot for tracking useractivity public version 
+            "activitytracker.site" = {
+                #serverAliases = [
+                #     "localhost"
+                #]; 
+                root = "/data/website/tracker-site-public";
+                forceSSL = true;
+                enableACME = true;
+                quic = true;
+                http3 = true;
+                locations."/" = {
+	                tryFiles = "$uri $uri/ /index.html =404";
+		};
+                locations."/api" = {
+                    extraConfig =''
+                        rewrite /api/(.*) /$1 break;
+                    '';
+                    proxyPass = "http://127.0.0.1:8081";
+                };
+           };
+            "adguard.home.arpa" = {
+                locations."/".proxyPass = "http://127.0.0.1:3000";
+            }; 
+        };
+    };
+}