hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

Working url & mail for Hasenloch

Browse source 
Solution for url:
 - turn on recommended proxy settings (is there are reason why these
   weren't set already?)

Solution to get mail working:
 - don't use IPv6 for DNS
 - container is now IPv4
 - steal DNS configs from other containers because no one knows how
   they actually work
This commit is contained in:
stuebinm 2021-02-20 23:24:19 +01:00
parent 8c083034db
commit e380e04745
1 changed files with 22 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
hosts/hainich/services/hasenloch.nix
View file

@ -4,16 +4,19 @@
containers.hasenloch = {
autoStart = true;
privateNetwork = true;
hostAddress6 = "fd00::42:14";
localAddress6 = "fd00::42:18";
hostAddress = "192.168.100.5";
localAddress = "192.168.100.7";
config = { pkgs, config, ...}: {
config = { pkgs, config2, ...}: {
services.engelsystem = {
enable = true;
domain = "himmel.hacc.earth";
config = {
url = "https://himmel.hacc.earth";
trusted_proxies = [ "${config.containers.hasenloch.hostAddress}/31" ];
rewrite_urls = true;
app_name = "Hasenloch";
footer_items = {
@ -51,13 +54,28 @@
};
networking.firewall.allowedTCPPorts = [ 80 ];
networking.firewall.enable = false;
services.coredns = {
enable = true;
config = ''
.:53 {
forward . 1.1.1.1
}
'';
};
};
};
services.nginx.recommendedProxySettings = true;
services.nginx.virtualHosts."himmel.hacc.earth" = {
locations."/".proxyPass = "http://[" + config.containers.hasenloch.localAddress6 + "]";
locations."/".proxyPass = "http://" + config.containers.hasenloch.localAddress;
forceSSL = true;
enableACME = true;
};
networking.nat.enable = true;
networking.nat.internalInterfaces = ["ve-hasenloch"];
networking.nat.externalInterface = "enp6s0";
}