Simon Bruder
c0b743a65b
This is so I can only enable it when I don’t mind it generating tons of noise.
34 lines
841 B
Nix
34 lines
841 B
Nix
{ config, ... }:
|
|
|
|
{
|
|
sops.secrets = {
|
|
media-htpasswd.owner = "nginx";
|
|
media-sb-proxy-auth = {
|
|
owner = "nginx";
|
|
sopsFile = ../secrets.yaml;
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."media-sb.sbruder.de" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
|
|
basicAuthFile = config.sops.secrets.media-htpasswd.path;
|
|
|
|
locations = {
|
|
"/__nginx-interactive-index-assets__/".alias = "${builtins.filterSource
|
|
(path: type: baseNameOf path != "default.nix")
|
|
../../../modules/nginx-interactive-index}/";
|
|
|
|
"/" = {
|
|
extraConfig = ''
|
|
proxy_pass https://u313368-sub3.your-storagebox.de/;
|
|
proxy_set_header Host u313368-sub3.your-storagebox.de;
|
|
include ${config.sops.secrets.media-sb-proxy-auth.path};
|
|
proxy_buffering off;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|