simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

media-proxy: Use subdomains instead of paths

Browse source 
This should help with isolating the different services.
This commit is contained in:
Simon Bruder 2023-12-16 11:56:04 +01:00
parent 80fcaab244
commit 47998fddd0
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
1 changed files with 18 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

47
modules/media-proxy.nix
View file

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
port = 8888;
services = { services = {
"media" = config.sops.secrets.media-proxy-auth.path; "media" = config.sops.secrets.media-proxy-auth.path;
"media-sb" = config.sops.secrets.media-proxy-auth.path; "media-sb" = config.sops.secrets.media-proxy-auth.path;
@ -24,37 +23,27 @@ in
enable = true; enable = true;
commonHttpConfig = '' commonHttpConfig = ''
map $http_referer $media_proxy_referer { map $http_referer $media_proxy_referer {
~^http://localhost:8888/ ""; ~^http://.*\.localhost/ "";
default $http_referer; default $http_referer;
} }
''; '';
virtualHosts.media-proxy = { virtualHosts = lib.mapAttrs'
serverName = "localhost"; (name: secret: lib.nameValuePair "${name}.localhost" {
listen = [ locations."/" = {
{ inherit port; addr = "127.0.0.1"; } proxyPass = "https://${name}.sbruder.de/";
{ inherit port; addr = "[::1]"; } proxyWebsockets = true;
]; # they interfere here, as the host needs to be changed
locations = { recommendedProxySettings = false;
"/".extraConfig = '' extraConfig = ''
rewrite ^/__nginx-interactive-index-assets__/(.*)$ /media/__nginx-interactive-index-assets__/$1; proxy_buffering off;
''; include ${secret};
} // lib.mapAttrs' charset utf-8;
(name: secret: { proxy_set_header Referer $media_proxy_referer;
name = "/${name}/"; proxy_set_header Origin $media_proxy_referer;
value = { '';
proxyPass = "https://${name}.sbruder.de/"; };
proxyWebsockets = true; })
extraConfig = '' services;
proxy_buffering off;
include ${secret};
charset utf-8;
proxy_set_header Referer $media_proxy_referer;
proxy_set_header Origin $media_proxy_referer;
'';
};
})
services;
};
}; };
}; };
} }