ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

migrated forgejo to h001, removed from lio

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2025-04-29 20:54:19 -05:00
parent 38fde325ab
commit 43e095513b
5 changed files with 52 additions and 103 deletions
Download patch file Download diff file Expand all files Collapse all files

89
hosts/lio/containers.nix
View file

@ -3,7 +3,6 @@
...
}:
{
# NOTE some useful links
# nixos containers: https://blog.beardhatcode.be/2020/12/Declarative-Nixos-Containers.html
# https://nixos.wiki/wiki/NixOS_Containers
@ -11,7 +10,7 @@
imports = [
common.nixosModules.containers.librechat
common.nixosModules.containers.forgejo
# common.nixosModules.containers.forgejo
];
config = {
@ -26,33 +25,33 @@
firewall.trustedInterfaces = [ "ve-*" ];
};
containers.wasabi = {
ephemeral = true;
autoStart = true;
privateNetwork = true;
hostAddress = "10.0.0.1";
localAddress = "10.0.0.111";
config =
{ config, pkgs, ... }:
{
system.stateVersion = "24.11";
services.httpd.enable = true;
services.httpd.adminAddr = "foo@example.org";
networking.firewall = {
enable = true;
allowedTCPPorts = [ 80 ];
};
};
};
# containers.wasabi = {
# ephemeral = true;
# autoStart = true;
# privateNetwork = true;
# hostAddress = "10.0.0.1";
# localAddress = "10.0.0.111";
# config =
# { config, pkgs, ... }:
# {
# system.stateVersion = "24.11";
# services.httpd.enable = true;
# services.httpd.adminAddr = "foo@example.org";
# networking.firewall = {
# enable = true;
# allowedTCPPorts = [ 80 ];
# };
# };
# };
virtualisation.oci-containers.containers = {
ntest = {
image = "nginx:alpine";
ports = [
"127.0.0.1:8085:80"
];
};
};
# virtualisation.oci-containers.containers = {
# ntest = {
# image = "nginx:alpine";
# ports = [
# "127.0.0.1:8085:80"
# ];
# };
# };
virtualisation.oci-containers.backend = "docker";
@ -63,45 +62,13 @@
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
# "local.belljm.com" = {
# # enableACME = true;
# # forceSSL = true;
# locations."/".proxyPass = "http://${config.containers.wasabi.localAddress}:80";
# };
# "127.0.0.1" = {
# locations."/wasabi/" = {
# extraConfig = ''
# rewrite ^/wasabi/(.*) /$1 break;
# '';
# proxyPass = "http://${config.containers.wasabi.localAddress}:80/";
# };
# locations."/" = {
# return = "404"; # or 444 for drop
# };
# };
"git.joshuabell.xyz" = {
# GIT passthrough
locations."/" = {
proxyPass = "http://10.0.0.2:3000";
};
};
"_" = {
default = true;
locations."/" = {
return = "404"; # or 444 for drop
return = "444"; # or 444 for drop
};
};
};
# STREAMS
streamConfig = ''
server {
listen 3032;
proxy_pass 10.0.0.2:3032;
}
'';
};
networking.firewall.allowedTCPPorts = [