coolneng
/
zion
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Refactor nginx configuration

This commit is contained in:
coolneng 2021-02-03 03:56:59 +01:00
parent 37396a628c
commit c12fdc15de
Signed by: coolneng
GPG Key ID: 9893DA236405AF57
1 changed files with 14 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
modules/webstack.nix
View File

@ -23,9 +23,6 @@
}
add_header Strict-Transport-Security $hsts_header;
# Enable CSP for your services.
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
# Minimize information leaked to other domains
add_header 'Referrer-Policy' 'origin-when-cross-origin';
@ -46,18 +43,13 @@
"coolneng.duckdns.org" = {
enableACME = true;
forceSSL = true;
locations."/radicale/" = {
return = "301 https://radicale.coolneng.duckdns.org";
};
locations."/syncthing/" = {
return = "301 https://sync.coolneng.duckdns.org";
};
locations."/gitea/" = {
extraConfig =
# Redirect from legacy subdirectory URL to subdomain
locations = {
"/radicale/".return = "301 https://radicale.coolneng.duckdns.org";
"/syncthing/".return = "301 https://sync.coolneng.duckdns.org";
"/gitea/".extraConfig =
"rewrite ^/gitea/(.*)$ https://git.coolneng.duckdns.org/$1 last;";
};
locations."/miniflux/" = {
extraConfig =
"/miniflux/".extraConfig =
"rewrite ^/miniflux/(.*)$ https://rss.coolneng.duckdns.org/$1 last;";
};
};
@ -75,17 +67,17 @@
"sync.coolneng.duckdns.org" = {
enableACME = true;
forceSSL = true;
locations."/" = { proxyPass = "http://localhost:8384/"; };
locations."/".proxyPass = "http://localhost:8384/";
};
"git.coolneng.duckdns.org" = {
enableACME = true;
forceSSL = true;
locations."/" = { proxyPass = "http://localhost:3000/"; };
locations."/".proxyPass = "http://localhost:3000/";
};
"rss.coolneng.duckdns.org" = {
enableACME = true;
forceSSL = true;
locations."/" = { proxyPass = "http://localhost:8080/"; };
locations."/".proxyPass = "http://localhost:8080/";
};
"matrix.coolneng.duckdns.org" = {
enableACME = true;
@ -107,8 +99,7 @@
"element.coolneng.duckdns.org" = {
enableACME = true;
forceSSL = true;
locations."/" = {
root = pkgs.element-web.override {
locations."/".root = pkgs.element-web.override {
conf = {
default_server_config."m.homeserver" = {
"base_url" = "https://matrix.coolneng.duckdns.org";
@ -117,7 +108,6 @@
};
};
};
};
"wallabag.coolneng.duckdns.org" = {
root = "${pkgs.wallabag}/web";
locations."/" = { tryFiles = "$uri /app.php$is_args$args"; };