tlaternet/tlaternet-server
1
0
Fork 0
Code Issues 8 Pull requests Activity

Compare commits

base: tlaternet:bec9e413cb00d312029592b74ef0f58dcb881a7b
Branches Tags
tlaternet:master
tlaternet:tlater/ntfy-as-contact
tlaternet:tlater/vendor-webserver
tlaternet:tlater/authelia-attempt-3
tlaternet:tlater/authelia-2
tlaternet:tlater/crowdsec-whitelists
tlaternet:tlater/authelia
..
compare: tlaternet:f04ec5fbc6549b9a84f0187e0c380ae63df4dd71
Branches Tags
tlaternet:master
tlaternet:tlater/ntfy-as-contact
tlaternet:tlater/vendor-webserver
tlaternet:tlater/authelia-attempt-3
tlaternet:tlater/authelia-2
tlaternet:tlater/crowdsec-whitelists
tlaternet:tlater/authelia

6 commits
bec9e413cb ... f04ec5fbc6

Author SHA1 Message Date
Tristan Daniël Maat
f04ec5fbc6
refactor: Don't do pointless indirection when importing modules 2025-11-20 10:57:54 +08:00
Tristan Daniël Maat
796213b0ed
refactor: Move service imports into a default.nix 2025-11-20 10:57:54 +08:00
Tristan Daniël Maat
6094ff7d12
fix: Make the default package disabling actually work 2025-11-20 10:57:54 +08:00
Tristan Daniël Maat
6a172bc574
chore: Disable hack for Minecraft optimization on VPS 2025-11-20 10:57:54 +08:00
Tristan Daniël Maat
6bedb95929
refactor(firewall): Make services responsible for opening ports 2025-11-20 10:57:54 +08:00
Tristan Daniël Maat
12790d5444
test(nginx): Add simple tests to assert nginx features work 2025-11-20 10:57:54 +08:00
1 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
configuration/nginx/ssl.nix
View file

@ -93,7 +93,6 @@
virtualHosts."${config.services.nginx.domain}" = { virtualHosts."${config.services.nginx.domain}" = {
useACMEHost = "tlater.net"; useACMEHost = "tlater.net";
forceSSL = true;
enableHSTS = true; enableHSTS = true;
locations."/".return = "200 ok"; locations."/".return = "200 ok";
}; };
@ -101,8 +100,8 @@
}; };
in in
{ {
hstsIsSet = pkgs.testers.runNixOSTest { testNginxSSL = pkgs.testers.runNixOSTest {
name = "hsts-is-set"; name = "test-nginx-ssl";
node.specialArgs = { inherit flake-inputs; }; node.specialArgs = { inherit flake-inputs; };
nodes = { nodes = {
@ -122,7 +121,6 @@
testHost.copy_from_vm("/var/lib/acme/tlater.net/", "certs") testHost.copy_from_vm("/var/lib/acme/tlater.net/", "certs")
client.copy_from_host(f"{testHost.out_dir}/certs", "/certs") client.copy_from_host(f"{testHost.out_dir}/certs", "/certs")
client.succeed("curl --max-time 10 http://testHost")
res = client.succeed(" ".join([ res = client.succeed(" ".join([
"curl", "curl",
"--show-error", "--show-error",