efim
/
planning-poker-gwargh
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: allow setting tls on nixos

This commit is contained in:
efim 2023-10-09 03:22:58 +00:00
parent 7dbcc63394
commit e4edffd69f
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
flake.nix
View File

@ -72,6 +72,12 @@
default = true;
description = "Whether to use Nginx to proxy requests.";
};
useHostTls = lib.mkOption {
type = lib.types.bool;
default = false;
description =
"Whether virtual host should enable NixOS ACME certs";
};
};
config.users = lib.mkIf cfg.enable {
groups."${backendName}" = { };
@ -99,8 +105,10 @@
Group = "${backendName}";
};
};
config.services.nginx.virtualHosts.${cfg.host}.locations."/api" =
lib.mkIf cfg.enable {
config.services.nginx.virtualHosts.${cfg.host} = {
forceSSL = cfg.useHostTls;
enableACME = cfg.useHostTls;
locations."/api" = lib.mkIf cfg.enable {
proxyPass = "http://127.0.0.1:${toString cfg.port}";
# this is config for websocket
proxyWebsockets = true;
@ -112,6 +120,7 @@
proxy_set_header X-Forwarded-Proto $scheme;
'';
};
};
};
});
# see https://serokell.io/blog/practical-nix-flakes