fricklerhandwerk/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity

Remove SSL in Garage VM

Browse source
This commit is contained in:
Nicolas Jeannerod 2024-09-24 14:55:20 +02:00
parent 14de9dec55
commit f160bc3f4c
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
fediversity/garage.nix
View file

@ -159,10 +159,9 @@ in
}; };
}; };
services.nginx.virtualHosts."garagePortProxy" = { services.nginx.virtualHosts.${fedicfg.web.rootDomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
serverName = fedicfg.web.rootDomain;
serverAliases = lib.mapAttrsToList (bucket: _: fedicfg.web.domainForBucket bucket) cfg.ensureBuckets; ## TODO: use wildcard certificates? serverAliases = lib.mapAttrsToList (bucket: _: fedicfg.web.domainForBucket bucket) cfg.ensureBuckets; ## TODO: use wildcard certificates?
locations."/" = { locations."/" = {
proxyPass = "http://localhost:3902"; proxyPass = "http://localhost:3902";

9
vm/garage-vm.nix
View file

@ -1,6 +1,8 @@
{ config, modulesPath, ... }: { lib, config, modulesPath, ... }:
let let
inherit (lib) mkVMOverride;
fedicfg = config.fediversity.internal.garage; fedicfg = config.fediversity.internal.garage;
in { in {
@ -9,6 +11,11 @@ in {
(modulesPath + "/virtualisation/qemu-vm.nix") (modulesPath + "/virtualisation/qemu-vm.nix")
]; ];
services.nginx.virtualHosts.${fedicfg.web.rootDomain} = {
forceSSL = mkVMOverride false;
enableACME = mkVMOverride false;
};
virtualisation.diskSize = 2048; virtualisation.diskSize = 2048;
virtualisation.forwardPorts = [ virtualisation.forwardPorts = [
{ {