Richie
7f08a6f788
- move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access
13 lines
240 B
Nix
13 lines
240 B
Nix
{ pkgs, ... }:
|
|
let
|
|
vars = import ../vars.nix;
|
|
in
|
|
{
|
|
services.nix-serve = {
|
|
package = pkgs.nix-serve-ng;
|
|
enable = true;
|
|
secretKeyFile = "${vars.secrets}/services/nix-cache/cache-priv-key.pem";
|
|
openFirewall = false;
|
|
};
|
|
}
|