39 lines
913 B
Nix
39 lines
913 B
Nix
{
|
|
lib,
|
|
config,
|
|
flake-inputs,
|
|
...
|
|
}: let
|
|
domain = "foundryvtt.${config.services.nginx.domain}";
|
|
in {
|
|
imports = [flake-inputs.foundryvtt.nixosModules.foundryvtt];
|
|
|
|
services.foundryvtt = {
|
|
enable = true;
|
|
hostName = domain;
|
|
minifyStaticFiles = true;
|
|
proxySSL = true;
|
|
proxyPort = 443;
|
|
};
|
|
|
|
# Want to start it manually when I need it, not have it constantly
|
|
# running
|
|
systemd.services.foundryvtt.wantedBy = lib.mkForce [];
|
|
|
|
services.nginx.virtualHosts."${domain}" = let
|
|
inherit (config.services.foundryvtt) port;
|
|
in {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
extraConfig = ''
|
|
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
|
|
access_log /var/log/nginx/${domain}/access.log upstream_time;
|
|
'';
|
|
|
|
locations."/" = {
|
|
proxyWebsockets = true;
|
|
proxyPass = "http://localhost:${toString port}";
|
|
};
|
|
};
|
|
}
|