ghost: enable syncthing

This commit is contained in:
Leonardo Eugênio 2023-10-24 10:57:44 -03:00
parent 66b22ae784
commit 3ebd680633

View file

@ -94,6 +94,32 @@
defaults.email = "lelgenio@disroot.org";
};
services.syncthing = {
enable = true;
dataDir = "/var/lib/syncthing-data";
guiAddress = "0.0.0.0:8384";
openDefaultPorts = true;
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
};
services.nginx.virtualHosts."syncthing.lelgenio.xyz" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8384";
extraConfig =
# required when the target is also TLS server with multiple hosts
"proxy_ssl_server_name on;" +
# required when the server wants to use HTTP Authentication
"proxy_pass_header Authorization;"
;
};
};
networking.firewall.allowedTCPPorts = [ 80 443 ];
swapDevices = [{