decisions: init
This commit is contained in:
parent
7e2dc399bb
commit
cd10890f1b
|
@ -90,6 +90,8 @@
|
|||
./modules/initrd-ssh.nix
|
||||
./modules/fsrewsp.nix
|
||||
./modules/nightline.nix
|
||||
./modules/decisions.nix
|
||||
# ./modules/struktur-bot.nix
|
||||
{
|
||||
nixpkgs.overlays = [ self.overlays.default ];
|
||||
sops.defaultSopsFile = ./secrets/quitte.yaml;
|
||||
|
|
30
modules/decisions.nix
Normal file
30
modules/decisions.nix
Normal file
|
@ -0,0 +1,30 @@
|
|||
{ config, pkgs, ... }:
|
||||
let
|
||||
domain = "decisions.${config.networking.domain}";
|
||||
in
|
||||
{
|
||||
virtualisation.oci-containers = {
|
||||
backend = "docker";
|
||||
containers.decicions = {
|
||||
image = "decisions";
|
||||
volumes = [
|
||||
"/var/lib/nextcloud/data/root/files/FSR/protokolle:/protokolle:ro"
|
||||
];
|
||||
extraOptions = [ "--network=host" ];
|
||||
};
|
||||
};
|
||||
|
||||
services.nginx = {
|
||||
virtualHosts."${domain}" = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
locations."/" = {
|
||||
proxyPass = "http://127.0.0.1:5055";
|
||||
};
|
||||
extraConfig = ''
|
||||
auth_pam "LDAP Authentication Required";
|
||||
auth_pam_service_name "nginx";
|
||||
'';
|
||||
};
|
||||
};
|
||||
}
|
Loading…
Reference in a new issue