summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--lass/1systems/prism/config.nix19
1 files changed, 19 insertions, 0 deletions
diff --git a/lass/1systems/prism/config.nix b/lass/1systems/prism/config.nix
index 7234e7f22..29244f8a3 100644
--- a/lass/1systems/prism/config.nix
+++ b/lass/1systems/prism/config.nix
@@ -345,6 +345,25 @@ with import <stockholm/lib>;
{ predicate = "-i wiregrill -p udp --dport 4000:4002"; target = "ACCEPT"; }
];
}
+ { # acme fallback for neoprism migration
+ services.nginx.virtualHosts."lassul.us".acmeFallbackHost = "orange.r";
+ services.nginx.virtualHosts."radio.lassul.us".acmeFallbackHost = "neoprism.r";
+ services.nginx.virtualHosts."flix.lassul.us".acmeFallbackHost = "neoprism.r";
+ services.nginx.virtualHosts."jitsi.lassul.us".acmeFallbackHost = "neoprism.r";
+ services.nginx.virtualHosts."cgit.lassul.us".acmeFallbackHost = "orange.r";
+ services.nginx.virtualHosts."mail.lassul.us".acmeFallbackHost = "neoprism.r";
+ services.nginx.virtualHosts."mumble.lassul.us".acmeFallbackHost = "neoprism.r";
+ services.nginx.virtualHosts."mail.ubikmedia.eu" = {
+ enableACME = true;
+ forceSSL = true;
+ acmeFallbackHost = "ubik.r";
+ locations."/" = {
+ recommendedProxySettings = true;
+ proxyWebsockets = true;
+ proxyPass = "https://ubik.r";
+ };
+ };
+ }
];
krebs.build.host = config.krebs.hosts.prism;