genebean/dots
1
0
Fork 0
mirror of https://github.com/genebean/dots.git synced 2026-03-28 09:57:43 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #492 from genebean/streams

Browse source 
Nginx fixes, Nostr NIP-05 verification
This commit is contained in:
Gene Liverman 2025-01-28 23:39:27 -05:00 • committed by GitHub
commit 9900437340
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 33 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/hosts/nixos/hetznix01/default.nix
View file

@ -29,7 +29,9 @@
443 # https to local Nginx 443 # https to local Nginx
465 # SMTP with TLS 465 # SMTP with TLS
587 # SMTP with STARTTLS 587 # SMTP with STARTTLS
8333 # Bitcoin Core
8448 # Matrix Synapse 8448 # Matrix Synapse
9735 # LND
]; ];
# firewall.allowedUDPPorts = [ ... ]; # firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether. # Or disable the firewall altogether.

42
modules/hosts/nixos/hetznix01/post-install/nginx.nix
View file

@ -1,6 +1,8 @@
{ config, ... }: let { config, ... }: let
domain = "technicalissues.us"; domain = "technicalissues.us";
http_port = 80;
https_port = 443; https_port = 443;
private_btc = "100.83.153.7";
in { in {
services.nginx = { services.nginx = {
@ -18,10 +20,19 @@ in {
} }
add_header Strict-Transport-Security $hsts_header; add_header Strict-Transport-Security $hsts_header;
''; '';
defaultListen = [ streamConfig = ''
{ port = https_port; addr = "0.0.0.0"; ssl = true; } server {
{ port = https_port; addr = "[::]"; ssl = true; } listen 0.0.0.0:8333;
]; listen [::]:8333;
proxy_pass ${private_btc}:8333;
}
server {
listen 0.0.0.0:9735;
listen [::]:9735;
proxy_pass ${private_btc}:9735;
}
'';
virtualHosts = { virtualHosts = {
"hetznix01.${domain}" = { "hetznix01.${domain}" = {
serverAliases = [ serverAliases = [
@ -39,7 +50,7 @@ in {
}; };
"/.well-known/lnurlp/genebean" = { "/.well-known/lnurlp/genebean" = {
return = '' return = ''
200 '{"status":"OK","tag":"payRequest","commentAllowed":255,"callback":"https://getalby.com/lnurlp/genebean/callback","metadata":"[[\\"text/identifier\\",\\"genebean@getalby.com\\"],[\\"text/plain\\",\\"Sats for GeneBean\\"]]","minSendable":1000,"maxSendable":150000000,"payerData":{"name":{"mandatory":false},"email":{"mandatory":false},"pubkey":{"mandatory":false}},"nostrPubkey":"79f00d3f5a19ec806189fcab03c1be4ff81d18ee4f653c88fac41fe03570f432","allowsNostr":true}' 200 '{"status":"OK","tag":"payRequest","commentAllowed":255,"callback":"https://getalby.com/lnurlp/genebean/callback","metadata":"[[\\"text/identifier\\",\\"genebean@getalby.com\\"],[\\"text/plain\\",\\"Sats for GeneBean\\"]]","minSendable":1000,"maxSendable":10000000000,"payerData":{"name":{"mandatory":false},"email":{"mandatory":false},"pubkey":{"mandatory":false}},"nostrPubkey":"79f00d3f5a19ec806189fcab03c1be4ff81d18ee4f653c88fac41fe03570f432","allowsNostr":true}'
''; '';
extraConfig = '' extraConfig = ''
default_type application/json; default_type application/json;
@ -66,27 +77,36 @@ in {
add_header Access-Control-Allow-Origin *; add_header Access-Control-Allow-Origin *;
''; '';
}; };
"/.well-known/nostr.json" = {
return = ''
200 '{"names": {"genebean": "dba168fc95fdbd94b40096f4a6db1a296c0e85c4231bfc9226fca5b7fcc3e5ca"}}'
'';
extraConfig = ''
default_type application/json;
add_header Access-Control-Allow-Origin *;
'';
};
}; };
}; };
"albyhub.${domain}" = { "albyhub.${domain}" = {
listen = [
{ port = https_port; addr = "0.0.0.0"; ssl = true; }
{ port = https_port; addr = "[::]"; ssl = true; }
];
enableACME = true; enableACME = true;
acmeRoot = null; acmeRoot = null;
forceSSL = true; forceSSL = true;
# basicAuthFile = config.sops.secrets.owntracks_basic_auth.path; # basicAuthFile = config.sops.secrets.owntracks_basic_auth.path;
# Albyhub container # Albyhub via Tailscale
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:8080"; proxyPass = "http://${private_btc}:59000";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
"matrix.${domain}" = { "matrix.${domain}" = {
listen = [ listen = [
{ port = http_port; addr = "0.0.0.0"; }
{ port = http_port; addr = "[::]"; }
{ port = https_port; addr = "0.0.0.0"; ssl = true; } { port = https_port; addr = "0.0.0.0"; ssl = true; }
{ port = https_port; addr = "[::]"; ssl = true; } { port = https_port; addr = "[::]"; ssl = true; }
{ port = 8448; addr = "0.0.0.0"; ssl = true; } { port = 8448; addr = "0.0.0.0"; ssl = true; }
{ port = 8448; addr = "[::]"; ssl = true; } { port = 8448; addr = "[::]"; ssl = true; }
]; ];