From 16b8fef4f59583d8fa8ef0e7806ef1b3175bce40 Mon Sep 17 00:00:00 2001
From: makefu <github@syntax-fehler.de>
Date: Tue, 11 Apr 2017 21:35:49 +0200
Subject: m 2 deployment: add graphs

---
 makefu/2configs/deployment/graphs.nix | 37 +++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 makefu/2configs/deployment/graphs.nix

(limited to 'makefu/2configs/deployment')

diff --git a/makefu/2configs/deployment/graphs.nix b/makefu/2configs/deployment/graphs.nix
new file mode 100644
index 000000000..35a724f6a
--- /dev/null
+++ b/makefu/2configs/deployment/graphs.nix
@@ -0,0 +1,37 @@
+{ config, lib, pkgs, ... }:
+
+with import <stockholm/lib>;
+let
+  external-ip = config.krebs.build.host.nets.internet.ip4.addr;
+  internal-ip = config.krebs.build.host.nets.retiolum.ip4.addr;
+  hn = config.krebs.build.host.name;
+in {
+  krebs.bepasty.servers."paste.r".nginx.extraConfig = ''
+    if ( $server_addr = "${external-ip}" ) {
+      return 403;
+    }
+  '';
+  krebs.tinc_graphs = {
+    enable = true;
+    nginx = {
+      enable = true;
+      # TODO: remove hard-coded hostname
+      complete = {
+        extraConfig = ''
+          if ( $server_addr = "${external-ip}" ) {
+            return 403;
+          }
+        '';
+        serverAliases = [
+          "graphs.r" "graphs.retiolum"
+          "graphs.${hn}" "graphs.${hn}.retiolum"
+        ];
+      };
+      anonymous = {
+        enableSSL = true;
+        forceSSL = true;
+        enableACME = true;
+      };
+    };
+  };
+}
-- 
cgit v1.2.3


From 63a35e7bd7a5f402d9c6805b9e6d13806b82b118 Mon Sep 17 00:00:00 2001
From: makefu <github@syntax-fehler.de>
Date: Tue, 11 Apr 2017 21:36:10 +0200
Subject: m 2 deployment: uwsgi add

---
 makefu/2configs/deployment/uwsgi.nix | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 makefu/2configs/deployment/uwsgi.nix

(limited to 'makefu/2configs/deployment')

diff --git a/makefu/2configs/deployment/uwsgi.nix b/makefu/2configs/deployment/uwsgi.nix
new file mode 100644
index 000000000..4ad9961f6
--- /dev/null
+++ b/makefu/2configs/deployment/uwsgi.nix
@@ -0,0 +1,16 @@
+{ config, lib, pkgs, ... }:
+# more than just nginx config but not enough to become a module
+with import <stockholm/lib>;
+let
+  external-ip = config.krebs.build.host.nets.internet.ip4.addr;
+  wsgi-sock = "${config.services.uwsgi.runDir}/uwsgi.sock";
+  elch-sock = "${config.services.uwsgi.runDir}/uwsgi-elch.sock";
+in {
+
+  services.uwsgi = {
+    enable = true;
+    user = "nginx";
+    plugins = [ "python2" ];
+    instance.type = "emperor";
+  };
+}
-- 
cgit v1.2.3


From e0a423e1f0a228dbcaa70dd5037404608af8daeb Mon Sep 17 00:00:00 2001
From: makefu <github@syntax-fehler.de>
Date: Tue, 11 Apr 2017 21:36:27 +0200
Subject: m 2 deployment/uwsgi: purge

---
 makefu/2configs/deployment/uwsgi.nix | 16 ----------------
 1 file changed, 16 deletions(-)
 delete mode 100644 makefu/2configs/deployment/uwsgi.nix

(limited to 'makefu/2configs/deployment')

diff --git a/makefu/2configs/deployment/uwsgi.nix b/makefu/2configs/deployment/uwsgi.nix
deleted file mode 100644
index 4ad9961f6..000000000
--- a/makefu/2configs/deployment/uwsgi.nix
+++ /dev/null
@@ -1,16 +0,0 @@
-{ config, lib, pkgs, ... }:
-# more than just nginx config but not enough to become a module
-with import <stockholm/lib>;
-let
-  external-ip = config.krebs.build.host.nets.internet.ip4.addr;
-  wsgi-sock = "${config.services.uwsgi.runDir}/uwsgi.sock";
-  elch-sock = "${config.services.uwsgi.runDir}/uwsgi-elch.sock";
-in {
-
-  services.uwsgi = {
-    enable = true;
-    user = "nginx";
-    plugins = [ "python2" ];
-    instance.type = "emperor";
-  };
-}
-- 
cgit v1.2.3

[cgit] Unable to lock slot /tmp/cgit/9e000000.lock: No such file or directory (2)