1
0
Fork 0

"Expose" atuin via HTTPS

This commit is contained in:
Daniel Kempkens 2023-03-12 20:53:03 +01:00
parent 47559cdf34
commit 3f16f7de55
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
5 changed files with 17 additions and 7 deletions

View file

@ -10,8 +10,8 @@
settings = { settings = {
auto_sync = true; auto_sync = true;
sync_address = "http://100.113.242.85:8015"; sync_address = "https://atuin-sync.kempkens.io";
sync_frequency = "1h"; sync_frequency = "30m";
update_check = false; update_check = false;
style = "auto"; style = "auto";

View file

@ -4,7 +4,7 @@ in
{ {
matchBlocks = { matchBlocks = {
"builder-sail" = { "builder-sail" = {
hostname = secret-sail.tailscaleIP; hostname = "100.113.242.85";
port = 22; port = 22;
user = "root"; user = "root";
identityFile = "~/.ssh/Hetzner.pub"; identityFile = "~/.ssh/Hetzner.pub";

View file

@ -1,6 +1,3 @@
let
secret-sail = import ../../../../secret/hosts/sail.nix;
in
{ {
matchBlocks = { matchBlocks = {
"github.com" = { "github.com" = {
@ -53,7 +50,7 @@ in
}; };
"sail" = { "sail" = {
hostname = secret-sail.tailscaleIP; hostname = "100.113.242.85";
port = 22; port = 22;
user = "daniel"; user = "daniel";
forwardAgent = true; forwardAgent = true;

View file

@ -26,5 +26,18 @@
}; };
}; };
services.nginx.virtualHosts."atuin-sync.kempkens.io" = {
listenAddresses = [ "100.113.242.85" ];
http3 = true;
onlySSL = true;
useACMEHost = "kempkens.io";
locations."/" = {
recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:8015";
};
};
networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 8015 ]; networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 8015 ];
} }