my over complex system configurations
dotfiles.isabelroses.com/
nixos
nix
flake
dotfiles
linux
nixos/services/tranquil: nginx simplify
authored by
github-actions[bot]
cd48b773
c8bfe527
+2
-14
modules/nixos/services/tranquil.nix
+2
-14
modules/nixos/services/tranquil.nix
···
29
29
services = {
30
30
tranquil-pds = {
31
31
enable = true;
32
-
33
-
nginx.enable = true;
34
32
database.createLocally = true;
35
33
36
34
environmentFiles = [ config.sops.secrets.tranquil-env.path ];
···
63
61
};
64
62
};
65
63
66
-
nginx.virtualHosts.${cfg.domain}.locations = {
67
-
"/xrpc/".extraConfig = ''
68
-
add_header access-control-allow-headers "authorization,dpop,atproto-accept-labelers,atproto-proxy" always;
69
-
add_header X-Frame-Options SAMEORIGIN always;
70
-
add_header X-Content-Type-Options nosniff;
71
-
'';
72
-
73
-
"/assets/".extraConfig = ''
74
-
add_header 'Referrer-Policy' 'origin-when-cross-origin';
75
-
add_header X-Frame-Options "SAMEORIGIN" always;
76
-
add_header X-Content-Type-Options nosniff;
77
-
'';
64
+
nginx.virtualHosts.${cfg.domain}.locations."/" = {
65
+
proxyPass = "http://127.0.0.1:${toString cfg.port}";
78
66
};
79
67
};
80
68
};