From 8baa869f24d5641a6f61d197f6311caeb6495266 Mon Sep 17 00:00:00 2001
From: Kjetil Orbekk <kjetil.orbekk@gmail.com>
Date: Sat, 20 May 2017 18:21:25 -0400
Subject: shape: Add webserver.

---
 config/web-server.nix | 54 +++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 config/web-server.nix

(limited to 'config')

diff --git a/config/web-server.nix b/config/web-server.nix
new file mode 100644
index 0000000..e40cbce
--- /dev/null
+++ b/config/web-server.nix
@@ -0,0 +1,54 @@
+{ config, lib, pkgs, ... }:
+{
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    appendHttpConfig = ''
+      # This is a workaround to deal with closed connections on
+      # large downloads.
+      proxy_buffering off;
+    '';
+    virtualHosts = {
+      "orbekk.com" = {
+        enableACME = true;
+        forceSSL = true;
+        root = "/srv/www/orbekk";
+      };
+      "semeai.orbekk.com" = {
+        enableACME = true;
+        forceSSL = true;
+        root = "/srv/www/orbekk";
+      };
+      "kj.orbekk.com" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/".proxyPass = "http://10.0.20.11:8011";
+        locations."/hledger" = {
+          extraConfig = ''return 302 /hledger/;'';
+        };
+        # locations."/hledger/" = {
+        #   proxyPass = "http://localhost:5000/";
+        #   extraConfig = ''
+        #     auth_basic "hledger";
+        #     auth_basic_user_file /opt/site/hledger-htpasswd;
+        #   '';
+        # };
+        locations."/_matrix" = {
+          proxyPass = "http://10.0.20.15:11102";
+        };
+      };
+      "git.orbekk.com" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/".proxyPass = "http://10.0.20.15:11103";
+      };
+      "hydra.orbekk.com" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://10.0.20.15:11101";
+        };
+      };
+    };
+  };
+}
-- 
cgit v1.2.3