74 lines
1.9 KiB
Nix
74 lines
1.9 KiB
Nix
let
|
|
secret = import ../../secret/container/webserver;
|
|
custom-config = import ./config.nix { inherit secret; };
|
|
in
|
|
{
|
|
virtualisation.arion.projects.webserver.settings = {
|
|
services = {
|
|
mosquitto = {
|
|
service = {
|
|
image = "eclipse-mosquitto:2";
|
|
container_name = "mosquitto";
|
|
restart = "unless-stopped";
|
|
ports = [ "1883:1883" ];
|
|
user = "nobody";
|
|
volumes = [
|
|
"/etc/container-webserver/mosquitto:/mosquitto/config:ro"
|
|
];
|
|
labels = {
|
|
"com.centurylinklabs.watchtower.enable" = "true";
|
|
};
|
|
};
|
|
};
|
|
|
|
weewx = {
|
|
service = {
|
|
image = "ghcr.io/nifoc/weewx-docker:master";
|
|
container_name = "weewx";
|
|
restart = "unless-stopped";
|
|
depends_on = [ "mosquitto" ];
|
|
ports = [ "127.0.0.1:8000:8000" ];
|
|
environment = {
|
|
"TZ" = "Europe/Berlin";
|
|
};
|
|
volumes = [
|
|
"/etc/container-webserver/weewx:/data"
|
|
];
|
|
labels = {
|
|
"com.centurylinklabs.watchtower.enable" = "true";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."${secret.container.webserver.hostname}" = {
|
|
http3 = true;
|
|
|
|
root = "/etc/container-webserver/weewx/html/wdc";
|
|
forceSSL = true;
|
|
useACMEHost = "kempkens.io";
|
|
|
|
extraConfig = ''
|
|
index index.html;
|
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
|
|
'';
|
|
|
|
locations."~* \.html$".extraConfig = ''
|
|
expires modified 120s;
|
|
'';
|
|
|
|
locations."~* \.(js|css)$".extraConfig = ''
|
|
expires 1h;
|
|
'';
|
|
|
|
locations."~ ^/dwd/(icons|warn_icons)/" = {
|
|
recommendedProxySettings = true;
|
|
proxyPass = "http://127.0.0.1:8000";
|
|
};
|
|
|
|
locations."~ ^/dwd/[\w]+\.(gif|png)".extraConfig = ''
|
|
expires modified 1h;
|
|
'';
|
|
};
|
|
} // custom-config
|