mirror of https://gitlab.crans.org/nounous/nixos
34 lines
777 B
Nix
34 lines
777 B
Nix
{ lib, config, ... }:
|
|
|
|
{
|
|
services.nginx = lib.mkIf config.services.nginx.enable {
|
|
recommendedProxySettings = true;
|
|
recommendedOptimisation = true;
|
|
|
|
clientMaxBodySize = "512M";
|
|
|
|
# On trust nos ip internes pour bien indiquer le client au bout
|
|
# i.e. on considère pas le reverseproxy comme notre client
|
|
appendHttpConfig = ''
|
|
set_real_ip_from 172.16.0.0/16;
|
|
set_real_ip_from fd00::/56;
|
|
real_ip_header X-Real-Ip;
|
|
'';
|
|
|
|
virtualHosts.nginx-stub-status = lib.mkIf config.crans.monitoring.enable {
|
|
listen = [
|
|
{
|
|
addr = "[::1]";
|
|
port = 6424;
|
|
ssl = false;
|
|
}
|
|
];
|
|
locations."/stub_status" = {
|
|
extraConfig = ''
|
|
stub_status;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|