17 lines
452 B
Nix
17 lines
452 B
Nix
{ pkgs, config, secret, ... }:
|
|
|
|
{
|
|
services.nginx.streamConfig = ''
|
|
upstream home {
|
|
resolver 1.1.1.1 ipv6=off;
|
|
server ${secret.nginx.upstream.home.hostname}:${builtins.toString(secret.nginx.upstream.home.port)};
|
|
}
|
|
|
|
server {
|
|
listen ${builtins.toString(secret.nginx.upstream.home.port)};
|
|
proxy_pass home;
|
|
}
|
|
'';
|
|
|
|
networking.firewall.interfaces."enp1s0".allowedTCPPorts = [ secret.nginx.upstream.home.port ];
|
|
}
|