From 3bb938c9a0bf65390ad0f5095f27a5ab8ad57878 Mon Sep 17 00:00:00 2001
From: ADRN <adrien@luxeylab.net>
Date: Sun, 28 Nov 2021 19:20:36 +0100
Subject: Spoutnik is now an nginx reverse-proxy

---
 node/spoutnik.nix | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

(limited to 'node/spoutnik.nix')

diff --git a/node/spoutnik.nix b/node/spoutnik.nix
index 55df7d7..4aa6f91 100644
--- a/node/spoutnik.nix
+++ b/node/spoutnik.nix
@@ -24,5 +24,41 @@
     ips = [ "10.42.0.2/16" ];
     listenPort = 42136;
   };
+
+  # Nginx configuration:
+
+  services.nginx = {
+    enable = true;
+
+    # Use recommended settings
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    # Add any further config to match your needs, e.g.:
+    virtualHosts = let
+      base = locations: {
+        inherit locations;
+
+        forceSSL = true;
+        enableACME = true;
+      };
+      proxy = addr: port: base {
+        "/".proxyPass = "http://" + addr + ":" + toString(port);
+      };
+    in {
+      "axl.deuxfleurs.fr" = proxy "192.168.0.60" 80;
+      "warez.luxeylab.net" = proxy "192.168.0.50" 80;
+    };
+  };
+
+
+  # ACME:
+
+  security.acme = {
+    acceptTerms = true;
+    email = "adrien@luxeylab.net";
+  };
 }
 
-- 
cgit v1.2.3