From e6d6685ea0e04a20a2558973c326749d5fba582a Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Wed, 19 Feb 2025 19:13:33 +0100 Subject: Revert "firefly-iii" This reverts commit c0616edd38161b81ec1624efba3f024b120ba4c6. --- hosts/surtr/firefly.nix | 66 ------------------------------------------------- 1 file changed, 66 deletions(-) delete mode 100644 hosts/surtr/firefly.nix (limited to 'hosts/surtr/firefly.nix') diff --git a/hosts/surtr/firefly.nix b/hosts/surtr/firefly.nix deleted file mode 100644 index 2d9641b0..00000000 --- a/hosts/surtr/firefly.nix +++ /dev/null @@ -1,66 +0,0 @@ -{ config, ... }: - -{ - config = { - security.acme.rfc2136Domains = { - "firefly.yggdrasil.li" = { - restartUnits = ["nginx.service"]; - }; - }; - - services.nginx = { - upstreams."firefly" = { - servers = { - "[2a03:4000:52:ada:4:1::]:9000" = {}; - }; - extraConfig = '' - keepalive 8; - ''; - }; - virtualHosts = { - "firefly.yggdrasil.li" = { - kTLS = true; - http3 = true; - forceSSL = true; - sslCertificate = "/run/credentials/nginx.service/firefly.yggdrasil.li.pem"; - sslCertificateKey = "/run/credentials/nginx.service/firefly.yggdrasil.li.key.pem"; - sslTrustedCertificate = "/run/credentials/nginx.service/firefly.yggdrasil.li.chain.pem"; - extraConfig = '' - charset utf-8; - ''; - - locations = { - "/".extraConfig = '' - proxy_pass http://firefly; - - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - - proxy_redirect off; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host $server_name; - proxy_set_header X-Forwarded-Proto $scheme; - - client_max_body_size 0; - proxy_request_buffering off; - proxy_buffering off; - ''; - }; - }; - }; - }; - - systemd.services.nginx = { - serviceConfig = { - LoadCredential = [ - "firefly.yggdrasil.li.key.pem:${config.security.acme.certs."firefly.yggdrasil.li".directory}/key.pem" - "firefly.yggdrasil.li.pem:${config.security.acme.certs."firefly.yggdrasil.li".directory}/fullchain.pem" - "firefly.yggdrasil.li.chain.pem:${config.security.acme.certs."firefly.yggdrasil.li".directory}/chain.pem" - ]; - }; - }; - }; -} -- cgit v1.2.3