Richie
a51b8bc355
treefmt / nix fmt (pull_request) Successful in 6s
build_systems / build-jeeves (pull_request) Failing after 7s
pytest / pytest (pull_request) Successful in 29s
test ebook search / test-ebook-search (pull_request) Successful in 35s
build_systems / build-brain (pull_request) Successful in 57s
build_systems / build-bob (pull_request) Successful in 1m3s
build_systems / build-rhapsody-in-green (pull_request) Successful in 1m32s
- move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access
18 lines
336 B
Nix
18 lines
336 B
Nix
{ ... }:
|
|
{
|
|
imports = [ ./acme.nix ];
|
|
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
|
|
# Global robots.txt served by HAProxy for every vhost (see haproxy.cfg).
|
|
environment.etc."haproxy/robots.txt".source = ./robots.txt;
|
|
|
|
services.haproxy = {
|
|
enable = true;
|
|
config = builtins.readFile ./haproxy.cfg;
|
|
};
|
|
}
|