2005
9216cbbf62
added logging to all nginx routes
added loki, promtail to scrape nginx logs
turned i2pd back on,
updated my websites version
upgraded all hosts to 24.05
forgejo added bigger limit to upload limit due to docker images
privacy frontends:
added priviblur
libreddit -> redlib
added biblioreads
ddns-updater, changed credentials but there is a bug with porkbun
added penpot
brought back anonymousoverflow
added readme privacy respecting frontends
34 lines
836 B
Nix
34 lines
836 B
Nix
{ pkgs, config, ... }: {
|
|
|
|
|
|
services.scribe = {
|
|
enable = true;
|
|
appDomain = "scribe.${config.networking.domain}";
|
|
port = 7283;
|
|
|
|
# TODO , systemd doesnt like this, neither does it actually include the secrets
|
|
environmentFile = ''
|
|
GITHUB_PERSONAL_ACCESS_TOKEN=${config.age.secrets.github-token.path}
|
|
GITHUB_USERNAME=${config.age.secrets.github-username.path}
|
|
SECRET_KEY_BASE=${config.age.secrets.scribe-secret.path}
|
|
'';
|
|
};
|
|
|
|
services.nginx = {
|
|
virtualHosts = {
|
|
|
|
"scribe.${config.networking.domain}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = " http://127.0.0.1:7283";
|
|
extraConfig = ''
|
|
access_log /var/log/nginx/$server_name-access.log json_analytics;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
}
|