crans
/
nixos
mirror of https://gitlab.crans.org/nounous/nixos
19
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

anubis: yavait un ../ de trop…

reverseproxy
Pyjacpp 2026-07-27 16:31:42 +02:00
parent 231dc6e1b3
commit 12fe631737
No known key found for this signature in database
GPG Key ID: ED479A5A26930939
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
modules/services/reverseproxy.nix
View File

@ -158,6 +158,11 @@ in
}; };
}; };
age.secrets.anubis-secret = {
file = ../../secrets/reverseproxy/anubis-secret.age;
owner = "anubis";
};
services = mkIf cfg.enable { services = mkIf cfg.enable {
anubis = { anubis = {
defaultOptions.group = "nginx"; defaultOptions.group = "nginx";
@ -174,7 +179,7 @@ in
REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}"; REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}";
SOCKET_MODE = "0660"; SOCKET_MODE = "0660";
# Secret partagé entre les instances # Secret partagé entre les instances
ED25519_PRIVATE_KEY_HEX_FILE = "${../../../secrets/reverseproxy/anubis-secret.age}"; ED25519_PRIVATE_KEY_HEX_FILE = config.age.secrets.anubis-secret.path;
# OpenGraph config # OpenGraph config
OG_PASSTHROUGH = vhostConfig.anubisOpenGraph; OG_PASSTHROUGH = vhostConfig.anubisOpenGraph;
OG_EXPIRY_TIME = "24h"; OG_EXPIRY_TIME = "24h";