methanium/status
Watch
3
0
Fork
You've already forked status
 0
generated from methanium/template
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

Update stuff

Browse source
This commit is contained in:
Alois 2026-07-29 23:55:06 +02:00
commit 2058847d25
Signed by: alois
SSH key fingerprint: SHA256:GBzT2DXvAuGV9XIV5W3WrzVpjU54FThmxHXdbz95J24
2 changed files with 4 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

28
flake.nix
View file

@ -257,7 +257,7 @@
publicPort = lib.mkOption {
type = lib.types.port;
default = 443;
description = "Shared nginx TCP and MTP UDP public port.";
description = "Public UDP port for the MTP server.";
};
adminAddress = lib.mkOption {
type = lib.types.str;
@ -287,7 +287,7 @@
openFirewall = lib.mkOption {
type = lib.types.bool;
default = false;
description = "Open the public TCP and UDP port in the firewall.";
description = "Open the public UDP port in the firewall.";
};
openAdminFirewall = lib.mkOption {
type = lib.types.bool;
@ -332,32 +332,12 @@
isSystemUser = true;
group = "methanium-status";
};
users.users.nginx.extraGroups = [ "methanium-status" ];
security.acme.certs.${acmeHost} = {
group = "methanium-status";
reloadServices = [ "methanium-status.service" ];
};
services.nginx = {
enable = true;
virtualHosts.${cfg.hostName} = {
forceSSL = true;
enableACME = cfg.acmeHost == null;
useACMEHost = lib.mkIf (cfg.acmeHost != null) acmeHost;
root = cfg.frontendPackage;
listen = [
{ addr = "0.0.0.0"; port = cfg.publicPort; ssl = true; }
{ addr = "[::]"; port = cfg.publicPort; ssl = true; }
];
extraConfig = ''
add_header Alt-Svc 'h3=":${toString cfg.publicPort}"; ma=86400' always;
'';
locations."/".tryFiles = "$uri $uri/ /index.html";
locations."^~ /edit".return = "404";
};
};
systemd.services.methanium-status = {
description = "Methanium Status monitor";
wantedBy = [ "multi-user.target" ];
@ -393,9 +373,7 @@
};
};
networking.firewall.allowedTCPPorts =
lib.optionals cfg.openFirewall [ cfg.publicPort ]
++ lib.optionals cfg.openAdminFirewall [ cfg.adminPort ];
networking.firewall.allowedTCPPorts = lib.optionals cfg.openAdminFirewall [ cfg.adminPort ];
networking.firewall.allowedUDPPorts = lib.optionals cfg.openFirewall [ cfg.publicPort ];
};
};