Merge pull request 'leon' (#90) from leon/nix-config:leon into master

Reviewed-on: #90
This commit is contained in:
astro 2022-11-25 23:07:19 +01:00
commit 9c9c52b659
1 changed files with 23 additions and 23 deletions

View File

@ -25,8 +25,6 @@
# ' / `-----'' / |
# `...-' `...-'
#--------------------------------------------------------------------------------
{ config, lib, pkgs, ... }:
{
@ -67,10 +65,10 @@
openssh.authorizedKeys.keys = with import ../../users.nix;
leon.sshKeys;
};
networking.nameservers = ["172.20.73.8" "9.9.9.9"];
networking.firewall = {
allowedTCPPorts = [ 5000 22 53 80 443 8080 12000 ];
allowedUDPPorts = [ 5000 22 53 80 8080 18900 19900 ];
allowedUDPPorts = [ 53 80 8080 18900 19900 ];
};
#_______________________________Begin-VPN1-Server____________________________________
@ -159,17 +157,7 @@
allowedIPs = [ "10.10.11.30" ];
}
#---------------------black----------------------------.
{
#black-phone
publicKey= "3GEocBTOztOKWtWQFOmI5hynPiPcMMe54kVaHECAG1A=";
allowedIPs = [ "10.10.11.90" ];
}
{
#black-desktop
publicKey= "24TAa1HMXTPaFNfbXLkuxVy305NjSAegMSYjKLH5Kjc=";
allowedIPs = [ "10.10.11.91" ];
}
];
};
};
@ -207,10 +195,8 @@ networking.wireguard.interfaces = {
#-----------------------------ngin-X--------------------------------
services.nginx = {
defaultListenAddresses = [ "0.0.0.0:80" ];
enable = true;
virtualHosts."bicospacetech.c3d2.de" = {
default = true;
virtualHosts."bicospacetech.c3d2.de" = {
forceSSL = true;
enableACME = true;
locations."/" = {
@ -218,13 +204,27 @@ networking.wireguard.interfaces = {
proxyWebsockets = true;
};
};
virtualHosts."cloud.bicospacetech.c3d2.de" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://10.10.11.2:2500";
proxyWebsockets = true;
};
};
virtualHosts."portainer.netlab.c3d2.de" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://10.10.11.60:9000";
proxyWebsockets = true;
};
};
};
#-----------------------------ngin-X--------------------------------
#--------------------------Up-Stream--------------------------------
system.stateVersion = "22.05";
}