peperunas/nixos
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

dns: moved config to vhost

Browse Source
This commit is contained in:
Giulio De Pasquale 2023-06-05 00:30:07 +02:00
parent 78fc53024f
commit acb47f5a73
1 changed files with 12 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
hosts/architect/dns.nix
View File

@ -1,36 +1,26 @@
{ config, pkgs, lib, ... }: { config, pkgs, lib, ... }:
let let
adguard_dns_port = 5300;
domain = "adguard.architect.devs.giugl.io"; domain = "adguard.architect.devs.giugl.io";
utilities = import ./utilities.nix { inherit lib config; };
inherit (utilities) architectInterfaceAddress;
in in
{ {
architect.firewall.openUDPVPN = [ 53 ]; architect = {
firewall.openUDPVPN = [ 53 ];
networking.extraHosts = '' vhost.${domain} = {
${architectInterfaceAddress "lan"} ${domain} dnsInterfaces = [ "lan" "tailscale" "wireguard" ];
${architectInterfaceAddress "wireguard"} ${domain}
${architectInterfaceAddress "tailscale"} ${domain}
'';
services = { locations."/" = with config; {
nginx.virtualHosts.${domain} = { port = services.adguardhome.settings.bind_port;
forceSSL = true; allow = with architect.networks; [ lan.net tailscale.net ];
enableACME = true; deny = [
extraConfig = '' architect.networks."lan".devices.router.address
allow ${config.architect.networks.lan.net}; ];
allow ${config.architect.networks.tailscale.net};
deny all;
'';
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.adguardhome.settings.bind_port}";
}; };
}; };
};
services = {
dnsmasq = { dnsmasq = {
enable = true; enable = true;
settings = { settings = {