upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-08-08 21:04:38 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: firefly-iii test

Browse source
This commit is contained in:
Nick 2025-06-27 03:27:52 -05:00
parent b69ca8d8d1
commit dc644c34ee
1 changed files with 20 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

34
modules/nixos/services/firefly/default.nix
View file

@ -19,38 +19,43 @@ in
DB_DATABASE = "firefly"; DB_DATABASE = "firefly";
DB_USERNAME = "firefly"; DB_USERNAME = "firefly";
DB_PASSWORD_FILE = config.sops.secrets."${service.name}-pass".path; DB_PASSWORD_FILE = config.sops.secrets."${service.name}-pass".path;
TRUSTED_PROXIES = "**";
APP_URL = "https://${host}";
}; };
}; };
nginx = {
enable = true; # nginx = {
virtualHosts.${config.services.firefly-iii.virtualHost} = { # enable = true;
listen = [ # virtualHosts.${config.services.firefly-iii.virtualHost} = {
{ # listen = [
addr = "0.0.0.0"; # {
port = 8080; # addr = "0.0.0.0";
} # port = 8080;
]; # }
}; # ];
}; # };
# };
caddy = { caddy = {
virtualHosts = { virtualHosts = {
"${host}" = { "${host}" = {
extraConfig = '' extraConfig = ''
encode gzip encode gzip
reverse_proxy 0.0.0.0:8080 { # Proxy to Firefly III (which runs on port 8080 by default)
header_up Host {host}:{server_port} reverse_proxy localhost:8080 {
header_up Host {host}
header_up X-Real-IP {remote_host} header_up X-Real-IP {remote_host}
header_up X-Forwarded-For {remote_host} header_up X-Forwarded-For {remote_host}
header_up X-Forwarded-Proto https header_up X-Forwarded-Proto https
header_up X-Forwarded-Host {host} header_up X-Forwarded-Host {host}
header_up X-Forwarded-Ssl on header_up X-Forwarded-Ssl on
header_up Connection "" header_up Connection ""
timeout 240s timeout 240s
dial_timeout 240s dial_timeout 240s
} }
# Handle session cookies
@session_cookie header Cookie *session* @session_cookie header Cookie *session*
handle @session_cookie { handle @session_cookie {
header Cache-Control "no-cache, no-store, must-revalidate" header Cache-Control "no-cache, no-store, must-revalidate"
@ -59,6 +64,7 @@ in
request_body { request_body {
max_size 64MB max_size 64MB
} }
tls ${service.ssl.cert} ${service.ssl.key} tls ${service.ssl.cert} ${service.ssl.key}
''; '';
}; };