Jaculabilis/nixos-configs
1
1
Fork 0
Code Releases Activity

empyrean: add mTLS access for icecast

Browse Source
This commit is contained in:
Jaculabilis 2025-04-06 22:31:51 +00:00
parent 87564d589f
commit 1635e6123f
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
machine/empyrean/default.nix
View File

@ -136,6 +136,16 @@
ssl_client_certificate /etc/nginx/client-ca.crt;
'';
};
"icecast.secure.ktvb.site" = {
enableACME = true;
forceSSL = true;
locations."/".proxyPass = "http://10.22.20.1:8688";
extraConfig = ''
# enable mTLS
ssl_verify_client on;
ssl_client_certificate /etc/nginx/client-ca.crt;
'';
};
# mirror revproxy
"mirror.alogoulogoi.com" = {
enableACME = true;