root/the_prg_server_configuration_old
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Nope, nope wrong config.

Browse source
This commit is contained in:
Root User 2026-02-14 12:17:49 +01:00
parent 9b7d1ca52d
commit c5bf309d5b
Signed by: root
GPG key ID: 087F0A95E5766D72
1 changed files with 15 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

27
nix-system-configs/modules/system/traefik.nix
View file

@ -64,22 +64,22 @@ in {
PUBLIC_URL = "https://anubis.prg-radio.org"; PUBLIC_URL = "https://anubis.prg-radio.org";
# Cookie domain for proper scoping # Cookie domain for proper scoping
COOKIE_DOMAIN = ".prg-radio.org,prg-radio.org"; COOKIE_DOMAIN = ".prg-radio.org";
# Difficulty level # Difficulty level
DIFFICULTY = 7; DIFFICULTY = 7;
#ALGOTIHM = "slow"; #ALGOTIHM = "slow";
# This prevents Anubis from looping
# See: https://github.com/TecharoHQ/anubis/issues/970
JWT_RESTRICTION_HEADER = "CF-Connecting-IP";
# Optional: serve robots.txt # Optional: serve robots.txt
SERVE_ROBOTS_TXT = true; SERVE_ROBOTS_TXT = true;
# Optional: webmaster email for error pages # Optional: webmaster email for error pages
WEBMASTER_EMAIL = "dtu.prg@gmail.com"; WEBMASTER_EMAIL = "dtu.prg@gmail.com";
# Prevents infinite loop of doom:
#
JWT_RESTRICTION_HEADER="CF-Connecting-IP,X-Real-IP";
# Metrics on separate port # Metrics on separate port
METRICS_BIND_NETWORK = "tcp"; METRICS_BIND_NETWORK = "tcp";
METRICS_BIND = "127.0.0.1:8091"; METRICS_BIND = "127.0.0.1:8091";
@ -90,6 +90,7 @@ in {
COOKIE_SAME_SITE = "None"; # Only if Secure=true and you need cross-site COOKIE_SAME_SITE = "None"; # Only if Secure=true and you need cross-site
}; };
}; };
}; };
}; };
@ -173,9 +174,9 @@ in {
anubis = { anubis = {
rule = "Host(`anubis.prg-radio.org`)"; rule = "Host(`anubis.prg-radio.org`)";
service = "anubis"; service = "anubis";
entryPoints = ["websecure"]; entryPoints = [ "websecure" ];
tls = { tls = {
certresolver = "acme"; certresolver = "acme";
}; };
}; };
@ -183,16 +184,16 @@ in {
forgejo = { forgejo = {
rule = "Host(`git.prg-radio.org`)"; rule = "Host(`git.prg-radio.org`)";
service = "forgejo"; service = "forgejo";
entryPoints = ["websecure"]; entryPoints = [ "websecure" ];
tls = {}; tls = {};
middlewares = ["anubisForwardAuth"]; middlewares = [ "anubisForwardAuth" ];
}; };
# Matrix HTTP router for client requests (Element etc.) # Matrix HTTP router for client requests (Element etc.)
matrix = { matrix = {
rule = "Host(`lgbtq.prg-radio.org`)"; rule = "Host(`lgbtq.prg-radio.org`)";
service = "matrix"; service = "matrix";
entryPoints = ["websecure"]; entryPoints = [ "websecure" ];
tls = {}; tls = {};
}; };
@ -200,7 +201,7 @@ in {
wavelog = { wavelog = {
rule = "Host(`wavelog.prg-radio.org`)"; rule = "Host(`wavelog.prg-radio.org`)";
service = "wavelog"; service = "wavelog";
entryPoints = ["websecure"]; entryPoints = [ "websecure" ];
tls = {}; tls = {};
}; };
@ -208,9 +209,9 @@ in {
partdb = { partdb = {
rule = "Host(`partdb.prg-radio.org`)"; rule = "Host(`partdb.prg-radio.org`)";
service = "partdb"; service = "partdb";
entryPoints = ["websecure"]; entryPoints = [ "websecure" ];
tls = {}; tls = {};
middlewares = ["anubisForwardAuth"]; middlewares = [ "anubisForwardAuth" ];
}; };
}; };