greg/nixos
1
0
Fork 2
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Update forwarding for gitea

Browse Source
This commit is contained in:
Greg Hellings
2025-12-04 22:20:50 +00:00
parent 6d73dd3fb4
commit e96c89ec61
1 changed files with 31 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/linode/git.nix
+31 -29
View File
@@ -1,4 +1,4 @@
{ ... }: { lib, ... }:
let let
srcDomain = "src.thehellings.com"; srcDomain = "src.thehellings.com";
@@ -6,25 +6,27 @@ let
in in
{ {
greg.proxies."${srcDomain}" = { greg.proxies."${srcDomain}" = {
target = "https://vm-gitlab.shire-zebra.ts.net"; target = "https://gitea.shire-zebra.ts.net";
ssl = true; ssl = true;
genAliases = false; genAliases = false;
extraConfig = '' extraConfig = ''
proxy_set_header X-Forwarded-Proto https; proxy_ssl_verify off;
proxy_ssl_server_name on;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Ssl on; proxy_set_header X-Forwarded-Ssl on;
client_max_body_size 100000m; client_max_body_size 100000m;
''; '';
}; };
greg.proxies."registry.thehellings.com" = { #greg.proxies."registry.thehellings.com" = {
target = "https://vm-gitlab.shire-zebra.ts.net:5000"; #target = "https://gitea.shire-zebra.ts.net:5000";
ssl = true; #ssl = true;
genAliases = false; #genAliases = false;
extraConfig = '' #extraConfig = ''
proxy_set_header X-Forwarded-Proto https; #proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-Ssl on; #proxy_set_header X-Forwarded-Ssl on;
client_max_body_size 25000m; #client_max_body_size 25000m;
''; #'';
}; #};
networking.firewall.allowedTCPPorts = [ sshPort ]; networking.firewall.allowedTCPPorts = [ sshPort ];
@@ -34,23 +36,23 @@ in
services.haproxy = { services.haproxy = {
enable = true; enable = true;
config = builtins.concatStringsSep "\n" [ config = ''
"global" global
" daemon" daemon
" maxconn 20" maxconn 20
"defaults" defaults
" timeout connect 500s" timeout connect 500s
" timeout client 500s" timeout client 500s
" timeout server 1h" timeout server 1h
"listen gitsshd" listen gitsshd
" bind *:${toString sshPort}" bind *:${toString sshPort}
" timeout client 1h" timeout client 1h
" mode tcp" mode tcp
" server git-isaiah isaiah.shire-zebra.ts.net:32222" server git-isaiah isaiah.shire-zebra.ts.net:32222
" server git-jeremiah jeremiah.shire-zebra.ts.net:32222" server git-jeremiah jeremiah.shire-zebra.ts.net:32222
" server git-zeke zeke.shire-zebra.ts.net:32222" server git-zeke zeke.shire-zebra.ts.net:32222
]; '';
}; };
} }