aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

hosts/ao: finish bitwarden config

Browse source
This commit is contained in:
Henrik Lissner 2020-12-19 08:05:05 -05:00
parent 9d257c8e55
commit 807b76e640
No known key found for this signature in database
GPG key ID: 5F6C0EA160557395
2 changed files with 39 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

47
hosts/ao/default.nix
View file

@ -16,6 +16,7 @@ with lib.my;
services.ssh.enable = true;
services.nginx.enable = true;
services.gitea.enable = true;
services.bitwarden.enable = true;
# services.syncthing.enable = true;
theme.active = "alucard";
@ -31,8 +32,11 @@ with lib.my;
virtualHosts = {
"v0.io" = {
default = true;
enableACME = true;
forceSSL = true;
enableACME = true;
extraConfig = ''
client_max_body_size 128M;
'';
locations."/" = {
proxyPass = "https://192.168.1.3:8001";
extraConfig = ''
@ -42,15 +46,33 @@ with lib.my;
};
};
"git.v0.io" = {
enableACME = true;
forceSSL = true;
enableACME = true;
locations."/".proxyPass = "http://127.0.0.1:3000";
};
# "p.v0.io" = {
# enableACME = true;
# forceSSL = true;
# locations."/".proxyPass = http://127.0.0.1:9001;
# };
"p.v0.io" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8000";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
'';
};
locations."/notifications/hub" = {
proxyPass = "http://127.0.0.1:3012";
extraConfig = ''
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
'';
};
locations."/notifications/hub/negotiate" = {
proxyPass = "http://127.0.0.1:8001";
};
};
};
};
@ -59,7 +81,7 @@ with lib.my;
certs = let email = "henrik@lissner.net"; in {
"v0.io".email = email;
"git.v0.io".email = email;
# "p.v0.io".email = email;
"p.v0.io".email = email;
};
};
@ -70,12 +92,17 @@ with lib.my;
settings.server.SSH_DOMAIN = "v0.io";
};
services.bitwarden_rs.config = {
signupsAllowed = false;
domain = "https://p.v0.io";
httpPort = 8002;
};
services.fail2ban = {
enable = true;
ignoreIP = [ "127.0.0.1/8" "192.168.1.0/24" ];
jails.DEFAULT = ''
ignoreip = 127.0.0.1/8,192.168.1.0/24
bantime = 3600
maxretry = 5
'';
jails.sshd = ''
filter = sshd

5
modules/services/bitwarden.nix
View file

@ -9,8 +9,7 @@ in {
};
config = mkIf cfg.enable {
services.bitwarden_rs = {
enable = true;
};
services.bitwarden_rs.enable = true;
user.extraGroups = [ "bitwarden_rs" ];
};
}