genebean/dots
1
0
Fork 0
mirror of https://github.com/genebean/dots.git synced 2026-03-27 09:27:44 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Streaming across Tailscale for the win

Browse source
This commit is contained in:
Gene Liverman 2025-01-28 22:17:34 -05:00
parent 924766af58
commit 2810ed2ffd
2 changed files with 18 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/hosts/nixos/hetznix01/default.nix
View file

@ -29,7 +29,9 @@
443 # https to local Nginx 443 # https to local Nginx
465 # SMTP with TLS 465 # SMTP with TLS
587 # SMTP with STARTTLS 587 # SMTP with STARTTLS
8333 # Bitcoin Core
8448 # Matrix Synapse 8448 # Matrix Synapse
9735 # LND
]; ];
# firewall.allowedUDPPorts = [ ... ]; # firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether. # Or disable the firewall altogether.

18
modules/hosts/nixos/hetznix01/post-install/nginx.nix
View file

@ -2,6 +2,7 @@
domain = "technicalissues.us"; domain = "technicalissues.us";
http_port = 80; http_port = 80;
https_port = 443; https_port = 443;
private_btc = "100.83.153.7";
in { in {
services.nginx = { services.nginx = {
@ -19,6 +20,19 @@ in {
} }
add_header Strict-Transport-Security $hsts_header; add_header Strict-Transport-Security $hsts_header;
''; '';
streamConfig = ''
server {
listen 0.0.0.0:8333;
listen [::]:8333;
proxy_pass ${private_btc}:8333;
}
server {
listen 0.0.0.0:9735;
listen [::]:9735;
proxy_pass ${private_btc}:9735;
}
'';
virtualHosts = { virtualHosts = {
"hetznix01.${domain}" = { "hetznix01.${domain}" = {
serverAliases = [ serverAliases = [
@ -70,9 +84,9 @@ in {
acmeRoot = null; acmeRoot = null;
forceSSL = true; forceSSL = true;
# basicAuthFile = config.sops.secrets.owntracks_basic_auth.path; # basicAuthFile = config.sops.secrets.owntracks_basic_auth.path;
# Albyhub container # Albyhub via Tailscale
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:8080"; proxyPass = "http://${private_btc}:59000";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };