blob: 022d2b32b969949c03bf2f8bec2f7b0e7f60309a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
{ config, ... }:
let
secrets = config.sops.secrets;
domain = "git.sorre.internal";
in
{
services.nginx = {
enable = true;
virtualHosts."${domain}" = {
forceSSL = true;
sslCertificateKey = secrets."wg-ca-key".path;
sslCertificate = secrets."wg-ca-crt".path;
listen = [
{
addr = "100.64.0.3";
port = 443;
ssl = true;
}
];
};
};
services.cgit.internal = {
enable = true;
scanPath = "/var/lib/git";
nginx.virtualHost = domain;
gitHttpBackend.checkExportOkFiles = false;
};
}
|
