vivlim
/
snoottube-ops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix reverse proxy

This commit is contained in:
Vivian Lim 2024-02-08 01:08:06 -08:00
parent 7649409a8c
commit a830379178
3 changed files with 19 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
configs/wob.nix
View File

@ -96,8 +96,9 @@
};
# use local 3proxy for http requests
networking.proxy.httpProxy = "http://127.0.0.1:3128";
networking.proxy.httpsProxy = "http://127.0.0.1:3128";
# these are configured in gts environment now
#networking.proxy.httpProxy = "http://127.0.0.1:3128";
#networking.proxy.httpsProxy = "http://127.0.0.1:3128";
services.tailscale.enable = true;
services.dnscrypt-proxy2 = {

15
modules/gotosocial.nix
View File

@ -82,10 +82,11 @@ in {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${toString gtsPort}";
proxyPass = "http://gts";
proxyWebsockets = true;
extraConfig = ''
proxy_set_header Connection "";
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
'';
};
@ -100,5 +101,15 @@ in {
'';
};
};
upstreams.gts = {
servers = {
"127.0.0.1:${toString gtsPort}" = { };
};
extraConfig = ''
keepalive 32;
keepalive_timeout 30s;
'';
};
};
}

6
secrets/wob.yaml
View File

@ -1,6 +1,6 @@
borgbase_ssh_private_key: ENC[AES256_GCM,data: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,iv:WkCqLEVETft1Une91+i7dRkd6Y4zgx4e2kNLERMdkIA=,tag:idyIMcEO5kShXFP6GVO6EQ==,type:str]
borg_backup_repo_passphrase: ENC[AES256_GCM,data:8zHnNw48P9WZjP7fTulTHurUXEJ217gKmbJOLUsfk8PYAyJnIYIEdL6dbP5lRNMzdU/1,iv:1yma8xCI47dCvhxTkCVlSLGGSu+SpfATFdIg7Wrs010=,tag:LhDtLqSvUarqGJ8xEPwn6w==,type:str]
gtsEnvironment: ENC[AES256_GCM,data:SUpH1Pk/pPWCZ/TPgYeVB2JrUzxOFOXU8vXGiRLfU6klMSNG7/ESKEg/mYThq1gtOeTsEJuFv1CKeYfbReAbXcSUubVdfa5JnUITkVoat8TRA57mtMuMkP5trQn2OCDZkef6DpkiwUh/JbcXefu9cH/34/ojFwCTcH6iQcf/SpSFYEBvNIKJAxTUBhj0bMLisy+bZ47B7NHeREhXIF+9HVfU1qK2HY97IJVpqbKLhJbXeKMu/QjpSK34W7PvgFjEdDDmBTc=,iv:1yGEq9zjsGcR4f+ZUAi8YSAKWWKzaaJbRcOfrbffwp4=,tag:ZAl9bMLz1Gwo9RDaDzJXxg==,type:str]
gtsEnvironment: ENC[AES256_GCM,data:u51u5qHNpHumzyykZS2UpECAvppOXj9nH3rydR99W3/OBLaaoIKxDoZaDlCf+jz/C2wcSTc9ulP9CE6i51/S8mwgJ7jGAyMB0U5Ad9cIc7gql9zMbkhfONOq7Jydr+AaTIJ1PKK5u6NFamdbPKZNbsMnIlwtypApAnNrkn03nVUkFes2MW+fI4hOSOLCbR4qzgIVZquvVSYzR+FX22GMl1q3ehEg45JcKtfFsSvFvzY5tIzw6gqcB0l4s1vvi+H1zaCzexm2o9RWV0u9N4bNx9OAtht/5x97svryCSpmpepVguJNkgULPqFgfpzwfgeU35ol7XPt2X3PuQPcjwBizPcZfLfgaNF1eJgG1Enj8c95dA==,iv:9vUdfRcEmbD9aI5nmBd7OJhpHqYe1su4L2Qu9TNc2wQ=,tag:lTfdsvNfMDQt3kFtHkec6A==,type:str]
sops:
kms: []
gcp_kms: []
@ -43,8 +43,8 @@ sops:
NGhseHVJalAxZEpzT1Ntb2x6ZHhzcDQKHp6M0qb0dE2OyeYNSeO/WXntWFyyvRl7
i/7vPvPuE+dd/ld884UJtZUO1K7qHkXraXjHx8p27uUnN8ruNUn0bQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-02-04T01:58:51Z"
mac: ENC[AES256_GCM,data:QzO+EOejyPh0H64Cmf62Nv+7s41RmNwO4xNn3RLBYksQyqG/Em36rbBD4haLHv+fAXgWIzVCg4u5B2YJ3TMosggUwxH/5alLuH+hKKDLEiGMtvs2iO8q/AfYugn9/NRLnUvU19PGXaGJm2kEqoEE1fpMhuf6TK3o7drUQP3/95I=,iv:VJQqbuAMPrEMHLZA4sDGdDKwGz+AQa07UzMhWQMuOBA=,tag:IFyUGkcTsfC+2Sv0eYygBw==,type:str]
lastmodified: "2024-02-08T09:03:43Z"
mac: ENC[AES256_GCM,data:Dk61B7H0wPuB8s/FdsLvff5cNr7CmoOvvEaFyu17gtz7hcm9nbDzd0T5KmoLuIqVXKrWqWXxBXi8tpPswlUGtz2V1oPdoldJNSgiJisaWq82BDZPyn0nDYVZc+PQ/CIQqYGxjVcv7a1jwIVJ85kFxmIL7F+dMS7G8UZNKc19S3g=,iv:BVoKxEY9axdAg5BLKC9a7Bs7mgE/QejNezUdKofnCRA=,tag:D8PVmi4JHTweKcTy3hYkqw==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1