msyds/sydnix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deertopia): Persist SSL certs

Browse Source
This commit is contained in:
Madeleine Sydney
2025-02-25 03:44:51 -07:00
parent 4746fe5f37
commit a5bab1d73d
2 changed files with 21 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
modules/nixos/deertopia/authelia.nix
View File

@@ -132,18 +132,21 @@ in {
};
};
sydnix.deertopia.nginx.vhosts."auth".vhost = {
forceSSL = true;
enableACME = true;
extraConfig = ''
set $upstream http://127.0.0.1:${builtins.toString cfg.httpPort};
'';
locations."/".extraConfig = ''
include ${./authelia/proxy.conf};
proxy_pass $upstream;
'';
locations."/api/verify".proxyPass = "$upstream";
locations."/api/authz".proxyPass = "$upstream";
sydnix.deertopia.nginx.vhosts."auth" = {
directory = null;
vhost = {
forceSSL = true;
enableACME = true;
extraConfig = ''
set $upstream http://127.0.0.1:${builtins.toString cfg.httpPort};
'';
locations."/".extraConfig = ''
include ${./authelia/proxy.conf};
proxy_pass $upstream;
'';
locations."/api/verify".proxyPass = "$upstream";
locations."/api/authz".proxyPass = "$upstream";
};
};
# TODO: Remove this. It's only used for a quick demo for myself. The