diff options
Diffstat (limited to 'hostnix/weebnix/configuration.nix')
| -rw-r--r-- | hostnix/weebnix/configuration.nix | 17 |
1 files changed, 1 insertions, 16 deletions
diff --git a/hostnix/weebnix/configuration.nix b/hostnix/weebnix/configuration.nix index 1669b8a..a879185 100644 --- a/hostnix/weebnix/configuration.nix +++ b/hostnix/weebnix/configuration.nix @@ -5,6 +5,7 @@ ./dyndns.nix ./hardware-configuration.nix ./home-assistant.nix + ./oidc.nix ./syncthing.nix ./system.nix ]; @@ -34,28 +35,12 @@ services.openssh.enable = true; - services.keycloak = { - enable = true; - database.passwordFile = "/var/lib/secrets/keycloak.dbpass"; - settings = { - hostname = "kc.weebnix.mou.fo"; - http-host = "127.0.0.1"; - http-port = 7567; - proxy = "edge"; - }; - }; - services.nginx = { enable = true; recommendedGzipSettings = true; recommendedOptimisation = true; recommendedProxySettings = true; recommendedTlsSettings = true; - virtualHosts."kc.weebnix.mou.fo" = { - enableACME = true; - forceSSL = true; - locations."/".proxyPass = "http://127.0.0.1:7567"; - }; # Slightly crazy setup to SNI reverse proxy HTTPS to multiple upstreams. # We displace ourselves onto port 8443, and send requests that are not # intended for us to weeber. This is done because Apache running on weeber |