r
/
nixos-configuration
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: r:78f66778119ab4c0663ee8f7c989377ec7c52749
Branches Tags
r:main
..
compare: r:4baeb59aaf00ba59c1ab02284153a7a4542f0c5d
Branches Tags
r:main

3 Commits
78f6677811 ... 4baeb59aaf

Author SHA1 Message Date
Joshua Potter 4baeb59aaf Specify PHX_HOST for reconn. 2024-04-12 14:50:17 -06:00
Joshua Potter 5dc3c977f1 Turn on nginx recommended settings. Bump reconn. 2024-04-12 14:10:56 -06:00
Joshua Potter f7b1e01ee9 Prefer server bin file. 2024-04-12 13:30:06 -06:00
7 changed files with 97 additions and 49 deletions
Show Stats Expand all files Collapse all files

17
services/blog.nix
View File

@ -4,11 +4,18 @@ let
"github:jrpotter/blog/457bfd6c521d5d8eeb41deb7d5d6a925fd55dda9";
in
{
services.nginx.virtualHosts."blog.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
root = blog.packages.${system}.app;
services.nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."blog.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
root = blog.packages.${system}.app;
};
};
};
}

26
services/boardwise/default.nix
View File

@ -9,13 +9,19 @@ let
in
{
services = {
nginx.virtualHosts."www.boardwise.gg" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "boardwise.gg" ];
locations."/" = {
recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:4000";
nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."www.boardwise.gg" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "boardwise.gg" ];
locations."/" = {
proxyPass = "http://127.0.0.1:4000";
};
};
};
postgresql = {
@ -42,9 +48,9 @@ in
Type = "exec";
EnvironmentFile = "/run/secrets/BOARDWISE_SECRET_KEY_BASE";
ExecStartPre = "${boardwise}/bin/migrate";
ExecStart = "${boardwise}/bin/boardwise start";
ExecStop = "${boardwise}/bin/reconn stop";
ExecReload = "${boardwise}/bin/reconn restart";
ExecStart = "${boardwise}/bin/server start";
ExecStop = "${boardwise}/bin/server stop";
ExecReload = "${boardwise}/bin/server restart";
Restart = "on-failure";
};
};

17
services/bookshelf.nix
View File

@ -4,11 +4,18 @@ let
"github:jrpotter/bookshelf/bf9888c050b7a62f58be0198af19a6de7c40b375";
in
{
services.nginx.virtualHosts."bookshelf.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
root = bookshelf.packages.${system}.app;
services.nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."bookshelf.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
root = bookshelf.packages.${system}.app;
};
};
};
}

18
services/forgejo.nix
View File

@ -41,12 +41,18 @@
};
};
};
nginx.virtualHosts."git.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:3000";
nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."git.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000";
};
};
};
};

19
services/notebook.nix
View File

@ -4,12 +4,19 @@ let
"github:jrpotter/notebook/79b715a64c703279f593cad08775b0d73400a19b";
in
{
services.nginx.virtualHosts."notebook.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
root = "${notebook.packages.${system}.app}/share";
tryFiles = "$uri $uri.html $uri/ =404";
services.nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."notebook.jrpotter.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
root = "${notebook.packages.${system}.app}/share";
tryFiles = "$uri $uri.html $uri/ =404";
};
};
};
}

19
services/portfolio.nix
View File

@ -4,12 +4,19 @@ let
"github:jrpotter/portfolio/eca5e764f26faaa64f6966dbf3970b86eaaf2195";
in
{
services.nginx.virtualHosts."www.jrpotter.com" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "jrpotter.com" ];
locations."/" = {
root = portfolio.packages.${system}.app;
services.nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."www.jrpotter.com" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "jrpotter.com" ];
locations."/" = {
root = portfolio.packages.${system}.app;
};
};
};
}

30
services/reconn/default.nix
View File

@ -1,18 +1,25 @@
{ system, pkgs, lib, ... }:
let
reconn = (
builtins.getFlake "git+https://git.jrpotter.com/r/reconn?rev=74cb0be878441c4eafcfd2b2c2c926fe87ea8a30"
builtins.getFlake "git+ssh://forgejo@git.jrpotter.com/r/reconn?rev=42376b2060d00856ed3ea3e9ef9177ef6c7bca80"
).packages.${system}.app;
in
{
services = {
nginx.virtualHosts."www.hideandseek.live" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "hideandseek.live" ];
locations."/" = {
recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:4000";
nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."www.hideandseek.live" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "hideandseek.live" ];
locations."/" = {
proxyPass = "http://127.0.0.1:4000";
proxyWebsockets = true;
};
};
};
postgresql = {
@ -33,15 +40,16 @@ in
after = [ "network.target" "postgresql.service" ];
requires = [ "network-online.target" "postgresql.service" ];
environment = {
PHX_HOST = "hideandseek.live";
DATABASE_URL = "ecto://postgres:postgres@localhost/reconn";
};
serviceConfig = {
Type = "exec";
EnvironmentFile = "/run/secrets/RECONN_SECRET_KEY_BASE";
ExecStartPre = "${reconn}/bin/migrate";
ExecStart = "${reconn}/bin/reconn start";
ExecStop = "${reconn}/bin/reconn stop";
ExecReload = "${reconn}/bin/reconn restart";
ExecStart = "${reconn}/bin/server start";
ExecStop = "${reconn}/bin/server stop";
ExecReload = "${reconn}/bin/server restart";
Restart = "on-failure";
};
};