c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

hedgedoc: use socket

This commit is contained in:
Sandro - 2023-07-25 00:52:31 +02:00
parent 3ac98bf8d4
commit 6c23fa359b
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
hosts/hedgedoc/default.nix
View File

@ -29,6 +29,7 @@
defaultPermission = "freely";
domain = "hedgedoc.c3d2.de";
loglevel = "warn";
path = "/run/hedgedoc/hedgedoc.sock";
protocolUseSSL = true;
sessionSecret = "$sessionSecret";
};
@ -38,6 +39,7 @@
nginx = {
enable = true;
enableReload = true;
upstreams.hedgedoc.servers."unix:${config.services.hedgedoc.settings.path}" = { };
virtualHosts = {
"codimd.c3d2.de" = {
forceSSL = true;
@ -55,7 +57,7 @@
enableACME = true;
locations = {
"^~ /robots.txt".return = "200 'User-agent: *\\nDisallow: /'";
"/".proxyPass = "http://localhost:${toString config.services.hedgedoc.settings.port}";
"/".proxyPass = "http://hedgedoc";
};
};
};
@ -89,5 +91,14 @@
};
};
systemd = {
services.hedgedoc.serviceConfig.UMask = "0007";
tmpfiles.rules = [
"d /run/hedgedoc/ 0770 hedgedoc hedgedoc -"
];
};
system.stateVersion = "22.11";
users.users.nginx.extraGroups = [ "hedgedoc" ];
}