nixos-config/machines/renge/services/netbox.nix

27 lines
664 B
Nix
Raw Normal View History

2023-08-12 11:53:11 +02:00
{ config, pkgs, ... }:
{
sops.secrets.netbox-secret-key = {
sopsFile = ../secrets.yaml;
owner = "netbox";
};
services.netbox = {
enable = true;
package = pkgs.netbox;
secretKeyFile = config.sops.secrets.netbox-secret-key.path;
};
services.nginx.virtualHosts."netbox.sbruder.de" = {
enableACME = true;
forceSSL = true;
locations = {
"/".proxyPass = with config.services.netbox; "http://${listenAddress}:${toString port}";
"/static/".alias = "${config.services.netbox.dataDir}/static/";
};
};
# allow nginx access to static
users.groups."${config.users.users.netbox.name}".members = [ "nginx" ];
}