peter/haccfiles
1
0
Fork 0
forked from hacc/haccfiles
Code Issues Pull requests Projects Releases Wiki Activity

services/gitlab: init ssh

Browse source
This commit is contained in:
hexchen 2021-08-08 22:40:54 +00:00
parent 373926e33b
commit 69e49a0020
1 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
services/gitlab.nix
View file

@ -41,6 +41,8 @@
port = 443; port = 443;
statePath = "/persist/gitlab"; statePath = "/persist/gitlab";
user = "git";
databaseUsername = "git";
initialRootPasswordFile = "/persist/secrets/gitlab-root"; initialRootPasswordFile = "/persist/secrets/gitlab-root";
secrets.secretFile = "/persist/secrets/gitlab-secret"; secrets.secretFile = "/persist/secrets/gitlab-secret";
@ -113,6 +115,16 @@
}; };
}; };
services.openssh.enable = true;
services.openssh.passwordAuthentication = false;
users.users.git = {
isSystemUser = true;
group = "gitlab";
home = "/persist/gitlab/home";
uid = 165;
};
services.coredns = { services.coredns = {
enable = true; enable = true;
config = '' config = ''
@ -124,6 +136,12 @@
})).config.system.build.toplevel; })).config.system.build.toplevel;
}; };
hexchen.nftables.nat.forwardPorts = [{
ports = [ 22 ];
destination = "${config.containers.gitlab.localAddress}:22";
proto = "tcp";
}];
services.nginx.virtualHosts."gitlab.infra4future.de" = { services.nginx.virtualHosts."gitlab.infra4future.de" = {
locations."/".proxyPass = "http://${config.containers.gitlab.localAddress}:80"; locations."/".proxyPass = "http://${config.containers.gitlab.localAddress}:80";
locations."/".extraConfig = '' locations."/".extraConfig = ''