"Expose" atuin via HTTPS
This commit is contained in:
parent
47559cdf34
commit
3f16f7de55
5 changed files with 17 additions and 7 deletions
Binary file not shown.
|
@ -10,8 +10,8 @@
|
||||||
|
|
||||||
settings = {
|
settings = {
|
||||||
auto_sync = true;
|
auto_sync = true;
|
||||||
sync_address = "http://100.113.242.85:8015";
|
sync_address = "https://atuin-sync.kempkens.io";
|
||||||
sync_frequency = "1h";
|
sync_frequency = "30m";
|
||||||
update_check = false;
|
update_check = false;
|
||||||
|
|
||||||
style = "auto";
|
style = "auto";
|
||||||
|
|
|
@ -4,7 +4,7 @@ in
|
||||||
{
|
{
|
||||||
matchBlocks = {
|
matchBlocks = {
|
||||||
"builder-sail" = {
|
"builder-sail" = {
|
||||||
hostname = secret-sail.tailscaleIP;
|
hostname = "100.113.242.85";
|
||||||
port = 22;
|
port = 22;
|
||||||
user = "root";
|
user = "root";
|
||||||
identityFile = "~/.ssh/Hetzner.pub";
|
identityFile = "~/.ssh/Hetzner.pub";
|
||||||
|
|
|
@ -1,6 +1,3 @@
|
||||||
let
|
|
||||||
secret-sail = import ../../../../secret/hosts/sail.nix;
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
matchBlocks = {
|
matchBlocks = {
|
||||||
"github.com" = {
|
"github.com" = {
|
||||||
|
@ -53,7 +50,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
"sail" = {
|
"sail" = {
|
||||||
hostname = secret-sail.tailscaleIP;
|
hostname = "100.113.242.85";
|
||||||
port = 22;
|
port = 22;
|
||||||
user = "daniel";
|
user = "daniel";
|
||||||
forwardAgent = true;
|
forwardAgent = true;
|
||||||
|
|
|
@ -26,5 +26,18 @@
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
services.nginx.virtualHosts."atuin-sync.kempkens.io" = {
|
||||||
|
listenAddresses = [ "100.113.242.85" ];
|
||||||
|
http3 = true;
|
||||||
|
|
||||||
|
onlySSL = true;
|
||||||
|
useACMEHost = "kempkens.io";
|
||||||
|
|
||||||
|
locations."/" = {
|
||||||
|
recommendedProxySettings = true;
|
||||||
|
proxyPass = "http://127.0.0.1:8015";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 8015 ];
|
networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 8015 ];
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue