wurzel/fruitbasket
10
1
Fork 1
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity

nginx: streamline all forceSSL and enableACME directives in one file

Browse source
This commit is contained in:
Rouven Seifert 2024-03-25 19:34:47 +01:00
parent bedee4f90c
commit 4f1f88a779
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
32 changed files with 2 additions and 91 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/mail/default.nix
View file

@ -11,11 +11,6 @@ in
./mailman.nix
];
# Get SSL certs for dovecot and postfix via ngnix
services.nginx.virtualHosts."${hostname}" = {
forceSSL = true;
enableACME = true;
};
security.acme.certs."${hostname}" = {
reloadServices = [
"postfix.service"

2
modules/mail/mailman.nix
View file

@ -64,8 +64,6 @@
ensureDatabases = [ "mailman" "mailman-web" ];
};
services.nginx.virtualHosts."lists.${config.networking.domain}" = {
enableACME = true;
forceSSL = true;
locations."/robots.txt" = {
extraConfig = ''
add_header Content-Type text/plain;

2
modules/mail/rspamd.nix
View file

@ -117,8 +117,6 @@ in
};
nginx = {
virtualHosts."${domain}" = {
forceSSL = true;
enableACME = true;
locations = {
"/" = {
proxyPass = "http://127.0.0.1:11334";

4
modules/mail/sogo.nix
View file

@ -65,11 +65,7 @@ in
proxy_buffers 8 64k;
proxy_buffer_size 64k;
'';
forceSSL = true;
enableACME = true;
locations = {
"^~/SOGo".extraConfig = lib.mkForce ''
proxy_pass http://127.0.0.1:20000;
proxy_redirect http://127.0.0.1:20000 default;