@jaspermayone.com's dotfiles
feat: enable Docker and add WIT Calendar reverse proxy
+25
-1
+25
-1
hosts/alastor/configuration.nix
+25
-1
hosts/alastor/configuration.nix
···
90
90
useRoutingFeatures = "client";
91
91
};
92
92
93
+
# Docker
94
+
virtualisation.docker = {
95
+
enable = true;
96
+
autoPrune = {
97
+
enable = true;
98
+
dates = "weekly";
99
+
};
100
+
};
101
+
93
102
# User account
94
103
users.users.jsp = {
95
104
isNormalUser = true;
96
-
extraGroups = [ "wheel" ];
105
+
extraGroups = [ "wheel" "docker" ];
97
106
shell = pkgs.zsh;
98
107
openssh.authorizedKeys.keys = [
99
108
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHm7lo7umraewipgQu1Pifmoo/V8jYGDHjBTmt+7SOCe jsp@remus"
···
298
307
reverse_proxy localhost:3101 {
299
308
header_up X-Forwarded-Proto {scheme}
300
309
header_up X-Forwarded-For {remote}
310
+
}
311
+
'';
312
+
};
313
+
virtualHosts."server-calendar.witcc.dev" = {
314
+
extraConfig = ''
315
+
tls {
316
+
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
317
+
}
318
+
header {
319
+
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
320
+
}
321
+
reverse_proxy localhost:3002 {
322
+
header_up X-Forwarded-Proto {scheme}
323
+
header_up X-Forwarded-For {remote}
324
+
header_up X-Forwarded-Host {host}
301
325
}
302
326
'';
303
327
};