random stuff

2025-01-22 17:07:59 -06:00 · 2025-01-22 17:07:59 -06:00 · 3153fbe49c
commit 3153fbe49c
parent 92f34a8e0c
7 changed files with 249 additions and 28 deletions
--- a/hosts/oracle/o001/nginx.nix
+++ b/hosts/oracle/o001/nginx.nix
@ -0,0 +1,90 @@
+{
+  config,
+  ...
+}:
+{
+
+  # JUST A TEST TODO remove
+  containers.wasabi = {
+    ephemeral = true;
+    autoStart = true;
+    privateNetwork = true;
+    hostAddress = "192.168.100.2";
+    localAddress = "192.168.100.11";
+    config =
+      { config, pkgs, ... }:
+      {
+        system.stateVersion = "24.11";
+        services.httpd.enable = true;
+        services.httpd.adminAddr = "foo@example.org";
+        networking.firewall = {
+          enable = true;
+          allowedTCPPorts = [ 80 ];
+        };
+      };
+  };
+
+  security.acme.acceptTerms = true;
+  security.acme.email = "admin@joshuabell.xyz";
+  services.nginx = {
+    enable = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+    virtualHosts = {
+      # Redirect self IP to domain
+      "149.130.211.142" = {
+        locations."/" = {
+          return = "301 https://o001.joshuabell.xyz";
+        };
+      };
+
+      # "o001.joshuabell.xyz" = {
+      #   enableACME = true;
+      #   forceSSL = true;
+      #   locations = {
+      #     "/wasabi" = {
+      #       proxyPass = "http://192.168.100.11/";
+      #       extraConfig = ''
+      #         rewrite ^/wasabi/(.*) /$1 break;
+      #       '';
+      #     };
+      #     "/" = {
+      #       # return = "200 '<html>Hello World</html>'";
+      #       extraConfig = ''
+      #         default_type text/html;
+      #         return 200 '
+      #           <html>
+      #             <body style="width:100vw;height:100vh;overflow:hidden">
+      #               <div style="display: flex;width:100vw;height:100vh;justify-content: center;align-items:center;text-align:center;overflow:hidden">
+      #                 In the void you roam,</br>
+      #                 A page that cannot be found-</br>
+      #                 Turn back, seek anew.
+      #               </div>
+      #             </body>
+      #           </html>
+      #         ';
+      #       '';
+      #     };
+      #   };
+      # };
+
+      "_" = {
+        default = true;
+        locations."/" = {
+          return = "444"; # 404 for not found or 444 for drop
+        };
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80 # web http
+    443 # web https
+  ];
+
+  networking.firewall.allowedUDPPorts = [
+    # 4242 # nebula
+  ];
+}