fricklerhandwerk/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity

Remove SSL in Garage VM

Browse source
This commit is contained in:
Nicolas Jeannerod 2024-09-24 14:55:20 +02:00
parent 14de9dec55
commit f160bc3f4c
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
fediversity/garage.nix
View file

@ -159,10 +159,9 @@ in
};
};
services.nginx.virtualHosts."garagePortProxy" = {
services.nginx.virtualHosts.${fedicfg.web.rootDomain} = {
forceSSL = true;
enableACME = true;
serverName = fedicfg.web.rootDomain;
serverAliases = lib.mapAttrsToList (bucket: _: fedicfg.web.domainForBucket bucket) cfg.ensureBuckets; ## TODO: use wildcard certificates?
locations."/" = {
proxyPass = "http://localhost:3902";

9
vm/garage-vm.nix
View file

@ -1,6 +1,8 @@
{ config, modulesPath, ... }:
{ lib, config, modulesPath, ... }:
let
inherit (lib) mkVMOverride;
fedicfg = config.fediversity.internal.garage;
in {
@ -9,6 +11,11 @@ in {
(modulesPath + "/virtualisation/qemu-vm.nix")
];
services.nginx.virtualHosts.${fedicfg.web.rootDomain} = {
forceSSL = mkVMOverride false;
enableACME = mkVMOverride false;
};
virtualisation.diskSize = 2048;
virtualisation.forwardPorts = [
{