aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

turn off acme, since i was testing on capsul

Browse source
This commit is contained in:
Anish L 2022-08-02 21:25:31 +10:00
parent 62e24241c9
commit 31bec5a490
2 changed files with 21 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
profiles/gitea/default.nix
View file

@ -9,7 +9,7 @@
httpPort = 3001;
database = {
type = "postgres";
# passwordFile = "/run/secrets/gitea-dbpass"; # supplied by agenix
# passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
password = "somethingunknowablesorry";
};
settings = {
@ -32,10 +32,12 @@
''
gitea-users gitea gitea
'';
ensureDatabases = [ "gitea" ];
# ensureDatabases = [ "gitea" ];
ensureUsers = [
{ name = "gitea"; ensurePermissions."DATABASE gitea" = "ALLPRIVLEGES"; }
{ name = "gitea"; ensurePermissions."DATABASE gitea" = "ALL PRIVLEGES"; }
];
# TODO
# initialScript # set password for gitea user
};
services.nginx = {
@ -46,8 +48,8 @@
recommendedTlsSettings = true;
virtualHosts."git.sealight.xyz" = {
# Gitea hostname
enableACME = true; # Use ACME certs
forceSSL = true; # Force SSL
# enableACME = true; # Use ACME certs
# forceSSL = true; # Force SSL
locations."/".proxyPass = "http://localhost:3001/"; # Proxy Gitea
};
};

26
profiles/matrix/default.nix
View file

@ -97,11 +97,12 @@
group = "turnserver";
};
services.jitsi-meet = {
enable = true;
hostName = "jitsi.sealight.xyz";
};
services.jitsi-videobridge.enable = true;
# TODO fix up jitsi bridge stuff
## services.jitsi-meet = {
## enable = true;
## hostName = "jitsi.sealight.xyz";
## };
## services.jitsi-videobridge.enable = true;
services.mautrix-telegram = {
enable = true;
@ -177,8 +178,9 @@
## postgresql user and db name remains in the
## service.matrix-synapse.database_args setting which
## by default is matrix-synapse
# TODO agenix
initialScript = pkgs.writeText "synapse-init.sql" ''
CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD "Da0?H*9i{x?,]|'kq@iBwlIzu";
CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD "Da0?H*9i{x?,]|'kq@iBwlIzu";
CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
TEMPLATE template0
LC_COLLATE = "C"
@ -254,8 +256,8 @@
## virtual host for Synapse
"chat.sealight.xyz" = {
#forceSSL = true;
#enableACME = true;
#useACMEHost = "sealight.xyz";
#enableACME = true; # TODO
#useACMEHost = "sealight.xyz"; # TODO
locations."/" = {
proxyPass = "http://localhost:8448";
};
@ -263,16 +265,16 @@
## virtual host for Riot/Web
"element.sealight.xyz" = {
#forceSSL = true;
#enableACME = true;
#useACMEHost = "sealight.xyz";
#enableACME = true; # TODO
#useACMEHost = "sealight.xyz"; # TODO
## root points to the riot-web package content, also configured via Nix
locations."/" = {
root = pkgs.element-web;
};
};
${config.services.jitsi-meet.hostName} = {
#enableACME = true;
#forceSSL = true;
#enableACME = true; # TODO
#forceSSL = true; # TODO
};
};
## other nginx specific best practices