From 993ee4278534e639b78374d8c908da9e1f862717 Mon Sep 17 00:00:00 2001
From: Jens Nolte <git@queezle.net>
Date: Wed, 14 Apr 2021 17:42:43 +0200
Subject: [PATCH] Move home.queezle.net to internal address

---
 layers/home.queezle.net.nix | 26 +++++++++++++++++++-------
 1 file changed, 19 insertions(+), 7 deletions(-)

diff --git a/layers/home.queezle.net.nix b/layers/home.queezle.net.nix
index c834479..4c5ac77 100644
--- a/layers/home.queezle.net.nix
+++ b/layers/home.queezle.net.nix
@@ -5,6 +5,16 @@
 
   services.nginx = {
     virtualHosts."home.queezle.net" = {
+      listen = [
+        {
+          addr = "10.0.0.1";
+        }
+        {
+          addr = "10.0.0.1";
+          port = 443;
+          ssl = true;
+        }
+      ];
       forceSSL = true;
       useACMEHost = "home.queezle.net";
       # for qauth
@@ -14,7 +24,7 @@
       locations = {
         "= /" = {
           extraConfig = "default_type text/plain;";
-          return  = ''200 "Hello World!"'';
+          return  = ''307 /qapp/'';
         };
         "/ip" = {
           extraConfig = "default_type text/plain;";
@@ -24,13 +34,13 @@
           extraConfig = "default_type application/json;";
           return = ''200 "{\"ip\":\"$remote_addr\"}"'';
         };
-        "/k8ctl" = {
-          return  = ''301 /k8ctl/'';
+        "/qapp" = {
+          return  = ''301 /qapp/'';
         };
-        "/k8ctl/" = {
-          alias = "/srv/k8ctl/";
+        "/qapp/" = {
+          alias = "/srv/qapp/";
           index = "index.html";
-          extraConfig = "auth_request /auth;";
+          #extraConfig = "auth_request /auth;";
         };
         "/tmp/" = {
           alias = "/srv/tmp/";
@@ -40,8 +50,10 @@
           proxyWebsockets = true;
           extraConfig = ''
             proxy_read_timeout 5m;
-            auth_request /auth;
           '';
+          #extraConfig = ''
+          #  auth_request /auth;
+          #'';
         };
 
         "@error401" = {
-- 
GitLab