ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add PostGIS init service for Dawarich and enable ACME/SSL for Immich

Browse source
This commit is contained in:
Joshua Bell 2026-02-08 23:11:04 -06:00
parent dd66f172cd
commit 9e5e3cd4fa
2 changed files with 29 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

26
hosts/h001/containers/immich.nix
View file

@ -91,20 +91,18 @@ in
{
options = { };
config = {
services.nginx.virtualHosts."photos.joshuabell.xyz" = {
addSSL = true;
sslCertificate = "/var/lib/acme/joshuabell.xyz/fullchain.pem";
sslCertificateKey = "/var/lib/acme/joshuabell.xyz/key.pem";
locations = {
"/" = {
proxyWebsockets = true;
recommendedProxySettings = true;
proxyPass = "http://${containerAddress}:2283";
extraConfig = ''
proxy_set_header X-Forwarded-Proto https;
client_max_body_size 50G;
'';
};
services.nginx.virtualHosts."photos.joshuabell.xyz" = lib.mkIf (hasSecret "linode_rw_domains") {
forceSSL = true;
useACMEHost = "joshuabell.xyz";
extraConfig = ''
client_max_body_size 50G;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
send_timeout 600s;
'';
locations."/" = {
proxyWebsockets = true;
proxyPass = "http://${containerAddress}:2283";
};
};