Nickiel/nicks-nix-config
1
0
Fork 0
mirror of https://github.com/Nickiel12/nicks-nix-config.git synced 2024-11-22 20:59:32 -08:00
Code Issues Projects Releases Packages Wiki Activity

only jellyfin enabled

Browse source
This commit is contained in:
Nickiel12 2023-04-10 19:33:56 -07:00
parent 332d5fb31f
commit 808f983f9b
2 changed files with 32 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/Alaska/default.nix
View file

@ -6,7 +6,7 @@
imports = [ imports = [
(import ./hardware-configuration.nix) (import ./hardware-configuration.nix)
(import ./containers/nextcloud.nix) (import ./containers/nextcloud.nix)
(import ./modules/nginx.nix) (import ./modules/nginx.nix)
]; ];
environment.systemPackages = [ environment.systemPackages = [
@ -29,6 +29,11 @@
}; };
}; };
services.jellyfin = {
enable = true;
openFirewall = true;
};
services = { services = {
sshd.enable = true; sshd.enable = true;
openssh.settings = { openssh.settings = {

42
hosts/Alaska/modules/nginx.nix
View file

@ -3,30 +3,40 @@
{ {
services.nginx = { services.nginx = {
enable = true; enable = true;
commonHttpConfig = ''
real_ip_header CF-Connecting-IP;
add_header 'Referrer-Policy' 'origin-when-cross-origin';
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
'';
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
virtualHosts = { virtualHosts = {
"nickiel.net" = {
forceSSL = true; "jellyfin.nickiel.net" = {
sslCertificate = "/Aurora/nickiel.net.pem"; forceSSL = true;
sslCertificateKey = "/Aurora/nickiel.net.key"; sslCertificate = "/Aurora/nickiel.net.pem";
locations."/" = { sslCertificateKey = "/Aurora/nickiel.net.key";
root = "/var/lib/acme/nickiel.net"; locations."/" = {
}; proxyPass = "http://127.0.0.1:8096/";
proxyWebsockets = true;
#extraConfig = "proxy_pass_header Authorization";
};
}; };
"files.nickiel.net" = { #"files.nickiel.net" = {
forceSSL = true; # forceSSL = true;
sslCertificate = "/Aurora/nickiel.net.pem"; # sslCertificate = "/Aurora/nickiel.net.pem";
sslCertificateKey = "/Aurora/nickiel.net.key"; # sslCertificateKey = "/Aurora/nickiel.net.key";
locations."/" = { # locations."/" = {
proxyPass = "http://192.168.100.11:80"; # proxyPass = "http://192.168.100.11:80";
proxyWebsockets = true; # proxyWebsockets = true;
}; # };
}; # };
}; };
}; };
} }