tlaternet-server/configuration/services/webserver.nix

28 lines
673 B
Nix
Raw Normal View History

{config, ...}: let
domain = config.services.nginx.domain;
in {
services.tlaternet-webserver = {
enable = true;
listen = {
addr = "127.0.0.1";
port = 8000;
2021-12-26 19:00:59 +00:00
};
};
# Set up SSL
services.nginx.virtualHosts."${domain}" = let
inherit (config.services.tlaternet-webserver.listen) addr port;
in {
serverAliases = ["www.${domain}"];
2021-04-12 01:44:10 +01:00
forceSSL = true;
enableACME = true;
extraConfig = ''
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
access_log /var/log/nginx/${domain}/access.log upstream_time;
'';
2021-04-12 01:44:10 +01:00
locations."/".proxyPass = "http://${addr}:${toString port}";
2021-04-12 01:44:10 +01:00
};
}