cfg/host/roam/services.nix

75 lines
1.6 KiB
Nix

{
pkgs,
...
}:
{
services = {
nginx = {
enable = true;
recommendedTlsSettings = true;
recommendedProxySettings = true;
recommendedOptimisation = true;
virtualHosts.default = {
serverName = "_";
default = true;
rejectSSL = true;
locations."/".return = "302 https://hdohmen.de";
};
privateVirtualHosts."roam.lan" = {
locations."/" = { };
};
virtualHosts = {
"www.henri-dohmen.de" = {
enableACME = true;
forceSSL = true;
globalRedirect = "hdohmen.de";
};
"henri-dohmen.de" = {
enableACME = true;
forceSSL = true;
globalRedirect = "hdohmen.de";
};
"www.hdohmen.de" = {
enableACME = true;
forceSSL = true;
globalRedirect = "hdohmen.de";
};
"hdohmen.de" = {
enableACME = true;
forceSSL = true;
locations."/" = { };
extraConfig = ''
access_log off;
'';
};
"roam.hdohmen.de" = {
enableACME = true;
forceSSL = true;
locations."/" = { };
};
};
};
openssh = {
enable = true;
settings.PasswordAuthentication = false;
};
minecraft-server = {
enable = false; # TODO: whitelist
package = pkgs.papermcServers.papermc-1_21_9;
eula = true;
declarative = true;
serverProperties = {
level-seed = "hd";
difficulty = 3;
spawn-protection = 0;
server-ip = "0.0.0.0";
};
jvmOpts = "-Xms2048M -Xmx4096M";
};
};
}