daniel/dotfiles
1
0
Fork 0
Code Actions Activity

invidious: only listen via tailscale

Browse source
This commit is contained in:
Daniel Kempkens 2023-03-20 14:24:04 +01:00
parent 7c57c278a2
commit 756f8a4af3
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
4 changed files with 1 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
agenix/hosts/sail/config.nix
View file

@ -93,12 +93,6 @@
mode = "444"; mode = "444";
}; };
invidious-auth = {
file = ./invidious/auth.age;
owner = "nginx";
group = "nginx";
};
nitter-config = { nitter-config = {
file = ./nitter/config.age; file = ./nitter/config.age;
mode = "444"; mode = "444";

12
agenix/hosts/sail/invidious/auth.age
View file

@ -1,12 +0,0 @@
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE10R3A2ZyBUb0JZ
eHpReHFhOHVXS0NFTFBzL3hsR1EwZ3pNZXBLNzR6SEJDcFRUc3drCkFmTEdXeVBp
ZGtER0JsU2ZDOHRtYm1XdGxnVjhHa3BOajBHUWN3TlhsSTQKLT4gc3NoLWVkMjU1
MTkgTmJWNGh3IEZWR21Ndmo0Z2VPZU1ObHBjd1RpcEpGSytuNi9YQWU1ckIrWFBN
WmowRHMKdlQxdDY4c1U5eE04ZHlaakZiU3ViS085SDY2Zld4Y3VsbGtmYytvVVRG
NAotPiBSZm5bNExBbi1ncmVhc2UgRS9GPwoxaGRFMjVxNkgwakNPU21BY2xsODlz
bExEVEhBay9va0t1Y0NLUQotLS0gUXUyTVdEZHovaEEzK3c0bHh5S2hWYjRGWUNl
dzMvdDdhTVFMTysraENiVQq4fwe+dA0aQXZAGZd3oTKeWsZEoj9rpUiSorWPMiWv
5monAQZHX0TakOLoWCSg6fmEKOGteGJKJ3H7zhIJ9FMF5y69R52buiJ685XOlH+I
lgjR+22m5P6sEDKMjPtS02I5VL+3RiV595sw+9Perfdny2I=
-----END AGE ENCRYPTED FILE-----

1
secrets.nix
View file

@ -30,7 +30,6 @@ in
"agenix/hosts/sail/freshrss/databasePassword.age".publicKeys = sail; "agenix/hosts/sail/freshrss/databasePassword.age".publicKeys = sail;
"agenix/hosts/sail/invidious/databasePassword.age".publicKeys = sail; "agenix/hosts/sail/invidious/databasePassword.age".publicKeys = sail;
"agenix/hosts/sail/invidious/auth.age".publicKeys = sail;
"agenix/hosts/sail/nitter/config.age".publicKeys = sail; "agenix/hosts/sail/nitter/config.age".publicKeys = sail;
"agenix/hosts/sail/nitter/auth.age".publicKeys = sail; "agenix/hosts/sail/nitter/auth.age".publicKeys = sail;

2
system/nixos/invidious.nix
View file

@ -41,11 +41,11 @@ in
}; };
services.nginx.virtualHosts."${fqdn}" = { services.nginx.virtualHosts."${fqdn}" = {
listenAddresses = [ "100.113.242.85" ];
http3 = true; http3 = true;
onlySSL = true; onlySSL = true;
useACMEHost = "daniel.sx"; useACMEHost = "daniel.sx";
basicAuthFile = config.age.secrets.invidious-auth.path;
locations."/" = { locations."/" = {
recommendedProxySettings = true; recommendedProxySettings = true;