Nixos_config
/
Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update configuration.nix

This commit is contained in:
Tom 2024-08-07 19:16:27 +02:00
parent 999b484fd6
commit e3e756c854
1 changed files with 24 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
configuration.nix
View File

@ -14,12 +14,9 @@
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
networking.hostName = "nixos"; # Define your hostname.
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
boot.kernelPackages = pkgs.linuxPackages_latest;
# Configure network proxy if necessary
# networking.proxy.default = "http://user:password@proxy:port/";
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
networking.hostName = "nginx"; # Define your hostname.
# Enable networking
networking.networkmanager.enable = true;
@ -27,13 +24,22 @@
# Set your time zone.
time.timeZone = "Europe/Zurich";
system.autoUpgrade = {
enable = true;
allowReboot = true;
rebootWindow = {
lower = "01:00";
upper = "03:00";
};
};
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
# Configure keymap in X11
services.xserver = {
services.xserver.xkb = {
layout = "ch";
xkbVariant = "";
variant = "";
};
# Configure console keymap
@ -57,6 +63,7 @@
wget
curl
git
nginx
];
# Some programs need SUID wrappers, can be configured further or are
@ -71,9 +78,18 @@
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.nginx.enable = true;
services.nginx.virtualHosts."git.blubb.fish" = {
addSSL = true;
sslCertificate = /cert/git.blubb.fish/cert.pem;
sslCertificateKey = /cert/git.blubb.fish/key.pem;
sslTrustedCertificate = /cert/git.blubb.fish/fullchain.pem;
locations."/".proxyPass = "http://10.0.0.24:3000/";
};
# Open ports in the firewall.
# networking.firewall.allowedTCPPorts = [ ... ];
networking.firewall.allowedTCPPorts = [ 80 443 ];
# networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether.
# networking.firewall.enable = false;