clanModules: Add vaultwarden module. Add nginx module. Make matrix-synapse subdomain configurable
This commit is contained in:
@@ -143,6 +143,7 @@ in
|
||||
"dyndns"
|
||||
"enable"
|
||||
] "Just define clan.dyndns.settings to enable it")
|
||||
../nginx
|
||||
];
|
||||
|
||||
config = lib.mkMerge [
|
||||
@@ -158,11 +159,6 @@ in
|
||||
createHome = true;
|
||||
};
|
||||
|
||||
networking.firewall.allowedTCPPorts = lib.mkIf cfg.server.enable [
|
||||
80
|
||||
443
|
||||
];
|
||||
|
||||
services.nginx = lib.mkIf cfg.server.enable {
|
||||
enable = true;
|
||||
virtualHosts = {
|
||||
@@ -249,7 +245,6 @@ in
|
||||
PrivateDevices = "yes";
|
||||
ProtectKernelModules = "yes";
|
||||
ProtectKernelTunables = "yes";
|
||||
|
||||
WorkingDirectory = "/var/lib/${name}";
|
||||
ReadWritePaths = [
|
||||
"/proc/self"
|
||||
|
||||
Reference in New Issue
Block a user