cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

containers/beryllium: configure proper delegation

Browse source
This commit is contained in:
Cilly Leang 2026-03-15 22:48:04 +11:00
parent 16703bade1
commit 1486058b90
Signed by: cilly
GPG key ID: 6500251E087653C9
1 changed files with 26 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

26
containers/beryllium/flake.nix
View file

@ -20,10 +20,36 @@
services.nginx.virtualHosts."beryllium.lava.moe" = { services.nginx.virtualHosts."beryllium.lava.moe" = {
useACMEHost = "lava.moe"; useACMEHost = "lava.moe";
forceSSL = true; forceSSL = true;
# locations."/".extraConfig = "return 302 'https://lava.moe'";
locations."/".proxyPass = "http://[fd0d:1::${subnet}:2]:6167"; locations."/".proxyPass = "http://[fd0d:1::${subnet}:2]:6167";
# locations."/_matrix".proxyPass = "http://[::1]:8008";
locations."/_matrix".proxyPass = "http://[fd0d:1::${subnet}:2]:6167";
locations."/_conduwuit".proxyPass = "http://[fd0d:1::${subnet}:2]:6167";
locations."/_continuwuity".proxyPass = "http://[fd0d:1::${subnet}:2]:6167";
listenAddresses = [ "10.0.0.1" "[fd0d::1]" ]; listenAddresses = [ "10.0.0.1" "[fd0d::1]" ];
}; };
services.nginx.virtualHosts."lava.moe" = {
locations."= /.well-known/matrix/server".extraConfig =
let
server = { "m.server" = "beryllium.lava.moe:443"; };
in ''
add_header Content-Type application/json;
return 200 '${builtins.toJSON server}';
'';
locations."= /.well-known/matrix/client".extraConfig =
let
client = {
"m.homeserver" = { "base_url" = "https://beryllium.lava.moe"; };
# "m.identity_server" = { "base_url" = "https://vector.im"; };
};
in ''
add_header Content-Type application/json;
add_header Access-Control-Allow-Origin *;
return 200 '${builtins.toJSON client}';
'';
};
systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ]; systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];
containers.${name} = { containers.${name} = {
autoStart = true; autoStart = true;