diff options
| author | lassulus <git@lassul.us> | 2023-09-04 12:36:02 +0200 |
|---|---|---|
| committer | lassulus <git@lassul.us> | 2023-09-04 12:36:02 +0200 |
| commit | 60b4a4c2253b9b7d4da42c39dec7fa5c7e4991d2 (patch) | |
| tree | 47ebf439b8205b8f9d4b22d70dceb439042a5a81 /lass | |
| parent | 941203838900b2b46847022e1173af0a0e24828e (diff) | |
l prism.r: add migration config
Diffstat (limited to 'lass')
| -rw-r--r-- | lass/1systems/prism/config.nix | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/lass/1systems/prism/config.nix b/lass/1systems/prism/config.nix index 7234e7f22..29244f8a3 100644 --- a/lass/1systems/prism/config.nix +++ b/lass/1systems/prism/config.nix @@ -345,6 +345,25 @@ with import <stockholm/lib>; { predicate = "-i wiregrill -p udp --dport 4000:4002"; target = "ACCEPT"; } ]; } + { # acme fallback for neoprism migration + services.nginx.virtualHosts."lassul.us".acmeFallbackHost = "orange.r"; + services.nginx.virtualHosts."radio.lassul.us".acmeFallbackHost = "neoprism.r"; + services.nginx.virtualHosts."flix.lassul.us".acmeFallbackHost = "neoprism.r"; + services.nginx.virtualHosts."jitsi.lassul.us".acmeFallbackHost = "neoprism.r"; + services.nginx.virtualHosts."cgit.lassul.us".acmeFallbackHost = "orange.r"; + services.nginx.virtualHosts."mail.lassul.us".acmeFallbackHost = "neoprism.r"; + services.nginx.virtualHosts."mumble.lassul.us".acmeFallbackHost = "neoprism.r"; + services.nginx.virtualHosts."mail.ubikmedia.eu" = { + enableACME = true; + forceSSL = true; + acmeFallbackHost = "ubik.r"; + locations."/" = { + recommendedProxySettings = true; + proxyWebsockets = true; + proxyPass = "https://ubik.r"; + }; + }; + } ]; krebs.build.host = config.krebs.hosts.prism; |