ag/strojnadzor
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Include nginx config in the NixOS service

Browse source 
Static files are now served with nginx.
This commit is contained in:
Andrey Golovizin 2020-03-10 15:09:51 +01:00
parent 8ad1d1007e
commit ecb9d23d4c
1 changed files with 43 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

55
module.nix
View file

@ -8,6 +8,15 @@ let
cfg = config.services.strojnadzor;
hsts = ''
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
'';
static = pkgs.runCommand "static" {} ''
export STROJNADZOR_STATIC_ROOT="$out"
${strojnadzor}/bin/strojnadzor-admin collectstatic
'';
in
{
@ -56,18 +65,40 @@ in
"d '${cfg.stateDir}/data' - strojnadzor strojnadzor - -"
];
systemd.services.strojnadzor =
{
description = "Strojnadzor HTTP server.";
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
User = "strojnadzor";
Group = "strojnadzor";
ExecStartPre = "${strojnadzor}/bin/strojnadzor-admin migrate";
ExecStart = "${strojnadzor}/bin/strojnadzor-admin runserver-gunicorn --bind ${cfg.hostname}:${toString cfg.port}";
};
environment.STROJNADZOR_DATA_DIR = "${cfg.stateDir}/data";
systemd.services.strojnadzor = {
description = "Strojnadzor HTTP server.";
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
User = "strojnadzor";
Group = "strojnadzor";
ExecStartPre = "${strojnadzor}/bin/strojnadzor-admin migrate";
ExecStart = "${strojnadzor}/bin/strojnadzor-admin runserver-gunicorn --bind ${cfg.hostname}:${toString cfg.port}";
};
environment.STROJNADZOR_DATA_DIR = "${cfg.stateDir}/data";
environment.STROJNADZOR_STATIC_DIR = "${static}/static";
};
services.nginx = {
enable = true;
virtualHosts = {
"golovizin.ru" = {
serverAliases = [ "www.golovizin.ru" "xn--b1abndboscb.xn--p1ai" "www.xn--b1abndboscb.xn--p1ai" ];
forceSSL = true;
enableACME = true;
extraConfig = hsts + ''
gzip off;
'';
locations."/static/".alias = "${static}/";
locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
'';
};
};
};
};
};
}