VSinerva/nixos-conf
1
0
Fork 0
Code Activity Actions

Gitea to cert-store

Browse source
This commit is contained in:
Vili Sinervä 2025-01-20 23:11:21 +02:00
parent 5d07fa2fd4
commit 3c9f55eb8c
No known key found for this signature in database
GPG key ID: DF8FEAF54EFAC996
3 changed files with 6 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

1
services/acme-cert-store.nix
View file

@ -5,6 +5,7 @@
description = "Read-only access to certs";
openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys ++ [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHj2PK6LHsanSqaz8Gf/VqHaurd5e6Y7KnZNBiHb9adT nextcloud"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDiJZWlmiEkVzlf5/KV/jKkCGlgp8mnEeCnwk/dhdctJ gitea"
];
};

11
services/gitea.nix
View file

@ -1,11 +1,8 @@
{ config, ... }:
{
imports = [ ./acme-dns.nix ];
imports = [ ./cert-store-client.nix ];
networking.firewall.allowedTCPPorts = [
80
443
];
networking.firewall.allowedTCPPorts = [ 443 ];
networking.firewall.allowedUDPPorts = [ 443 ];
services = {
@ -53,8 +50,8 @@
virtualHosts.${config.services.gitea.settings.server.DOMAIN} = {
forceSSL = true;
kTLS = true;
enableACME = true;
acmeRoot = null;
sslCertificate = "/mnt/acme/fullchain.pem";
sslCertificateKey = "/mnt/acme/key.pem";
locations."/" = {
proxyPass = "http://localhost:8000";
};

5
services/nextcloud.nix
View file

@ -2,10 +2,7 @@
{
imports = [ ./cert-store-client.nix ];
networking.firewall.allowedTCPPorts = [
80
443
];
networking.firewall.allowedTCPPorts = [ 443 ];
networking.firewall.allowedUDPPorts = [ 443 ];
services = {