crans
/
nixos
mirror of https://gitlab.crans.org/nounous/nixos
19
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'reverseproxy' into 'main' 

anubis: improve php-my-admin and mediawiki

See merge request nounous/nixos!75
merge-requests/68/merge
Pyjacpp 2026-07-25 19:06:49 +02:00
parent f93cfa4f85 281325c0b1
commit 4e5d54a1bb
1 changed files with 30 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
hosts/vm/reverseproxy/reverseproxy.nix
View File

@ -87,6 +87,11 @@ let
path_regex = "^/[a-zA-Z0-9_-]*/public/.*";
action = "ALLOW";
}
{
name = "allow-phpmyadmin";
path_regex = "^/phpmyadmin/.*";
action = "ALLOW";
}
{
# geneau utilisait ses pages persos avant la mise en place d'Anubis.
# Le déploiement d'Anubis l'a impacté (cf les mails de fin 2025).
@ -102,7 +107,7 @@ let
}
{
name = "challenge-other";
path_regex = "^*";
path_regex = "^.*";
action = "CHALLENGE";
}
];
@ -131,6 +136,29 @@ let
];
};
anubisWiki = formatJSON.generate "anubis_wiki.json" {
"bots" = [
{
import = "${antiBot}";
}
{
name = "allow-mediawiki-images";
path_regex = "^/w/images/.*";
action = "ALLOW";
}
{
name = "allow-mediawiki-api";
path_regex = "^/w/api.php.*";
action = "ALLOW";
}
{
name = "challenge-other";
path_regex = ".*";
action = "CHALLENGE";
}
];
};
fetchFromCrans =
opts:
pkgs.fetchFromGitLab (
@ -230,7 +258,7 @@ in
proxyPass = "172.16.10.110";
};
"mediawiki" = {
anubisConfig = "${anubisChallenge}";
anubisConfig = "${anubisWiki}";
proxyPass = "172.16.10.144";
serverAliases = [ "mediakiwi" ];
};