adguardhome: improved upstream config
This commit is contained in:
parent
cbdb8eec7a
commit
aecd2b2a86
1 changed files with 60 additions and 45 deletions
|
@ -60,7 +60,20 @@
|
|||
|
||||
virtualisation.podman.defaultNetwork.settings.dns_enabled = lib.mkForce secret.adguardhome.podmanDNS;
|
||||
|
||||
services.nginx.virtualHosts."${secret.adguardhome.domain_prefix}.internal.kempkens.network" = {
|
||||
services.nginx = {
|
||||
upstreams.adguardhome = {
|
||||
servers = {
|
||||
"127.0.0.1:3000" = {
|
||||
fail_timeout = "2s";
|
||||
};
|
||||
};
|
||||
|
||||
extraConfig = ''
|
||||
keepalive 16;
|
||||
'';
|
||||
};
|
||||
|
||||
virtualHosts."${secret.adguardhome.domain_prefix}.internal.kempkens.network" = {
|
||||
serverAliases = [ "dns.internal.kempkens.network" ];
|
||||
|
||||
listen = [
|
||||
|
@ -99,7 +112,8 @@
|
|||
}
|
||||
];
|
||||
|
||||
quic = false;
|
||||
quic = true;
|
||||
http3 = true;
|
||||
|
||||
onlySSL = true;
|
||||
useACMEHost = "internal.kempkens.network";
|
||||
|
@ -112,7 +126,8 @@
|
|||
|
||||
locations."/" = {
|
||||
recommendedProxySettings = true;
|
||||
proxyPass = "http://127.0.0.1:3000";
|
||||
proxyPass = "http://adguardhome";
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue