daniel/dotfiles
1
0
Fork 0
Code Actions Activity

sail: Partially move Mastodon off of CF

Browse source
This commit is contained in:
Daniel Kempkens 2023-03-06 17:11:13 +01:00
parent a50276f120
commit c088193e28
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
1 changed files with 11 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
system/nixos/mastodon.nix
View file

@ -2,16 +2,6 @@
let
web-domain = "mastodon.kempkens.io";
nginx-extra-proxy-settings = ''
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $http_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_force_ranges on;
'';
in
{
services.mastodon = {
@ -81,22 +71,12 @@ in
};
services.nginx = {
enable = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedBrotliSettings = true;
virtualHosts."${web-domain}" = {
listen = [
{
addr = "127.0.0.1";
port = 80;
}
];
http3 = true;
root = "${config.services.mastodon.package}/public/";
forceSSL = false;
enableACME = false;
forceSSL = true;
useACMEHost = "kempkens.io";
locations."/system/" = {
extraConfig = ''
@ -109,15 +89,21 @@ in
};
locations."@proxy" = {
recommendedProxySettings = true;
proxyPass = "http://unix:/run/mastodon-web/web.socket";
proxyWebsockets = true;
extraConfig = nginx-extra-proxy-settings;
extraConfig = ''
proxy_force_ranges on;
'';
};
locations."/api/v1/streaming/" = {
recommendedProxySettings = true;
proxyPass = "http://unix:/run/mastodon-streaming/streaming.socket";
proxyWebsockets = true;
extraConfig = nginx-extra-proxy-settings;
extraConfig = ''
proxy_force_ranges on;
'';
};
};
};