From 1636706b98afceb1b073c25b52a904f267c61910 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Wed, 13 Apr 2022 11:24:02 -0700
Subject: nginx: add nginx as a reverse proxy

This will ultimately replace traefik.
---
 hosts/tahoe/services.nix | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

(limited to 'hosts/tahoe/services.nix')

diff --git a/hosts/tahoe/services.nix b/hosts/tahoe/services.nix
index 75a6ee2..8846eae 100644
--- a/hosts/tahoe/services.nix
+++ b/hosts/tahoe/services.nix
@@ -18,7 +18,20 @@ in {
       stateDir = "/var/lib/gitea";
     };
     rclone = { enable = true; };
-    traefik = { enable = true; };
+    traefik = { enable = false; };
+    nginx = {
+      enable = true;
+      acme = { credentialsFile = secrets."acme/dns-key".path; };
+      sso = {
+        authKeyFile = secrets."sso/auth-key".path;
+        users = {
+          fcuny = {
+            passwordHashFile = secrets."sso/fcuny/password-hash".path;
+          };
+        };
+        groups = { root = [ "fcuny" ]; };
+      };
+    };
     transmission = { enable = true; };
     metrics-exporter = { enable = true; };
     backup = {
-- 
cgit 1.4.1