diff --git a/hosts/leon/default.nix b/hosts/leon/default.nix index 84bc5582..c74b94a7 100644 --- a/hosts/leon/default.nix +++ b/hosts/leon/default.nix @@ -25,8 +25,6 @@ # ' / `-----'' / | # `...-' `...-' #-------------------------------------------------------------------------------- - - { config, lib, pkgs, ... }: { @@ -67,10 +65,10 @@ openssh.authorizedKeys.keys = with import ../../users.nix; leon.sshKeys; }; - + networking.nameservers = ["172.20.73.8" "9.9.9.9"]; networking.firewall = { allowedTCPPorts = [ 5000 22 53 80 443 8080 12000 ]; - allowedUDPPorts = [ 5000 22 53 80 8080 18900 19900 ]; + allowedUDPPorts = [ 53 80 8080 18900 19900 ]; }; #_______________________________Begin-VPN1-Server____________________________________ @@ -159,17 +157,7 @@ allowedIPs = [ "10.10.11.30" ]; } #---------------------black----------------------------. - { - #black-phone - publicKey= "3GEocBTOztOKWtWQFOmI5hynPiPcMMe54kVaHECAG1A="; - allowedIPs = [ "10.10.11.90" ]; - } - { - #black-desktop - publicKey= "24TAa1HMXTPaFNfbXLkuxVy305NjSAegMSYjKLH5Kjc="; - allowedIPs = [ "10.10.11.91" ]; - } - + ]; }; }; @@ -207,10 +195,8 @@ networking.wireguard.interfaces = { #-----------------------------ngin-X-------------------------------- services.nginx = { - defaultListenAddresses = [ "0.0.0.0:80" ]; enable = true; - virtualHosts."bicospacetech.c3d2.de" = { - default = true; + virtualHosts."bicospacetech.c3d2.de" = { forceSSL = true; enableACME = true; locations."/" = { @@ -218,13 +204,27 @@ networking.wireguard.interfaces = { proxyWebsockets = true; }; }; + virtualHosts."cloud.bicospacetech.c3d2.de" = { + forceSSL = true; + enableACME = true; + locations."/" = { + proxyPass = "http://10.10.11.2:2500"; + proxyWebsockets = true; + }; + }; + virtualHosts."portainer.netlab.c3d2.de" = { + forceSSL = true; + enableACME = true; + locations."/" = { + proxyPass = "http://10.10.11.60:9000"; + proxyWebsockets = true; + }; + }; + + }; #-----------------------------ngin-X-------------------------------- - - -#--------------------------Up-Stream-------------------------------- - - system.stateVersion = "22.05"; + }