1
0
Fork 0
dotfiles/container/proxitok/default.nix

53 lines
1.3 KiB
Nix
Raw Normal View History

2023-03-06 08:55:28 +00:00
{ config, secret, ... }:
2023-02-28 13:55:57 +00:00
{
virtualisation.arion.projects.proxitok.settings = {
services = {
proxitok-web = {
service = {
image = "ghcr.io/pablouser1/proxitok:master";
container_name = "proxitok-web";
restart = "unless-stopped";
depends_on = [ "proxitok-signer" ];
ports = [ "127.0.0.1:8005:80" ];
env_file = [ config.age.secrets.proxitok-environment.path ];
2023-02-28 14:22:22 +00:00
volumes = [
"/etc/container-proxitok/cache:/cache"
];
2023-02-28 13:55:57 +00:00
labels = {
"com.centurylinklabs.watchtower.enable" = "true";
};
};
};
proxitok-signer = {
service = {
image = "ghcr.io/pablouser1/signtok:master";
container_name = "proxitok-signer";
restart = "unless-stopped";
labels = {
"com.centurylinklabs.watchtower.enable" = "true";
};
};
};
};
};
2023-02-28 14:22:22 +00:00
systemd.tmpfiles.rules = [
"d /etc/container-proxitok/cache 0755 33 33"
];
2023-02-28 13:55:57 +00:00
services.nginx = {
2023-03-06 08:55:28 +00:00
virtualHosts."tictac.daniel.sx" = {
forceSSL = true;
useACMEHost = "daniel.sx";
basicAuthFile = config.age.secrets.proxitok-auth.path;
2023-02-28 13:55:57 +00:00
locations."/" = {
recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:8005";
};
};
};
}