this repo has no description
add webdav server for notes
+78
-1
+1
-1
nix/hosts/heather/reverse-proxy.nix
+1
-1
nix/hosts/heather/reverse-proxy.nix
+1
nix/hosts/misc/default.nix
+1
nix/hosts/misc/default.nix
+69
nix/hosts/misc/todos.nix
+69
nix/hosts/misc/todos.nix
···
1
+
{
2
+
pkgs,
3
+
config,
4
+
lib,
5
+
...
6
+
}:
7
+
let
8
+
domain = "todos.${lib.our.domains.pub}";
9
+
cfg = config.services.nginx;
10
+
in
11
+
{
12
+
services.nginx = {
13
+
enable = true;
14
+
user = "aria";
15
+
virtualHosts.${domain} = {
16
+
listen = [
17
+
{
18
+
addr = "0.0.0.0";
19
+
port = 3434;
20
+
}
21
+
{
22
+
addr = "[::]";
23
+
port = 3434;
24
+
}
25
+
];
26
+
locations = {
27
+
"/" = {
28
+
alias = "${pkgs.organice}/";
29
+
tryFiles = "$uri $uri/ /index.html";
30
+
};
31
+
"/webdav/" = {
32
+
extraConfig = ''
33
+
alias /mnt/aria_files/notes/;
34
+
client_body_temp_path /tmp/webdav;
35
+
dav_methods PUT DELETE MKCOL COPY MOVE;
36
+
dav_ext_methods PROPFIND OPTIONS;
37
+
create_full_put_path on;
38
+
39
+
# Basic authentication setup
40
+
auth_basic "Restricted Access";
41
+
auth_basic_user_file /etc/nginx/webdav.passwd;
42
+
43
+
# Deny all access unless authenticated
44
+
satisfy all;
45
+
allow all;
46
+
deny all;
47
+
'';
48
+
};
49
+
};
50
+
};
51
+
};
52
+
53
+
# Allow traffic from reverse proxy
54
+
networking.firewall.extraInputRules = ''
55
+
tcp dport 3434 accept
56
+
ip6 saddr { fc00:dead:beef::1/128 } tcp dport 3434 accept
57
+
ip saddr { 10.0.0.1/32 } tcp dport 3434 accept
58
+
'';
59
+
60
+
systemd.services.nginx.serviceConfig.BindPaths = "/mnt/aria_files/notes";
61
+
environment.persistence."/persist".files = [
62
+
{
63
+
file = "/etc/nginx/webdav.passwd";
64
+
user = cfg.user;
65
+
group = cfg.group;
66
+
mode = "0700";
67
+
}
68
+
];
69
+
}
+1
nix/packages.nix
+1
nix/packages.nix
+6
nix/pkgs/default.nix
+6
nix/pkgs/default.nix
···
87
87
}
88
88
);
89
89
};
90
+
# Vendored a zip file because I can't be bothered building it properly lol
91
+
organice = final.runCommandLocal "organice" { } ''
92
+
mkdir -p $out
93
+
cd $out
94
+
${final.lib.getExe final.unzip} ${../../web/organice.zip}
95
+
'';
90
96
91
97
# From inputs.tangled
92
98
tangled = (import "${inputs.tangled}/default.nix").outputs.packages.x86_64-linux;
web/organice.zip
web/organice.zip
This is a binary file and will not be displayed.