v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

added wireguard

Browse source
This commit is contained in:
Vivian 2022-05-06 17:41:05 +02:00
parent 617b854263
commit 97dbb87373
10 changed files with 204 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

46
nixos/hosts/nginx/configuration.nix
View file

@ -9,7 +9,8 @@ let
};
};
k8s_proxy = proxy "http://10.42.42.150:8000/";
in {
in
{
networking.hostName = "nginx";
# This value determines the NixOS release from which the default
@ -33,7 +34,7 @@ in {
# Reverse Proxies
virtualHosts."ha.0x76.dev" = proxy "http://home-assistant.olympus:8123/";
virtualHosts."zookeeper-dev.0x76.dev" = proxy "http://eevee.olympus:8085/";
virtualHosts."analytics.0x76.dev" = proxy "http://plausible.olympus:8000/";
# virtualHosts."analytics.0x76.dev" = proxy "http://plausible.olympus:8000/";
virtualHosts."git.0x76.dev" = proxy "http://gitea.olympus:3000";
# Kubernetes endpoints
@ -41,6 +42,47 @@ in {
virtualHosts."zookeeper.0x76.dev" = k8s_proxy;
virtualHosts."wooloofan.club" = k8s_proxy;
virtualHosts."whoami.wooloofan.club" = k8s_proxy;
# Headscale
virtualHosts."vpn.0x76.dev" = {
enableACME = true;
forceSSL = true;
locations = {
"/headscale." = {
extraConfig = ''
grpc_pass grpc://headscale.olympus:50443;
'';
priority = 1;
};
# "/metrics" = {
# proxyPass = "http://plausible.olympus:9090";
# extraConfig = ''
# allow 10.0.0.0/8;
# allow 100.64.0.0/16;
# deny all;
# '';
# priority = 2;
# };
"/" = {
proxyPass = "http://headscale.olympus:8080";
proxyWebsockets = true;
extraConfig = ''
keepalive_requests 100000;
keepalive_timeout 160s;
proxy_buffering off;
proxy_connect_timeout 75;
proxy_ignore_client_abort on;
proxy_read_timeout 900s;
proxy_send_timeout 600;
send_timeout 600;
'';
priority = 99;
};
};
};
};
security.acme.defaults.email = "victorheld12@gmail.com";