28 lines
No EOL
672 B
Nix
28 lines
No EOL
672 B
Nix
{ config, enableSSL, ... }:
|
|
|
|
let
|
|
baseDomain = "elnu.com";
|
|
domain = "headscale.${baseDomain}";
|
|
in {
|
|
services.headscale = {
|
|
enable = true;
|
|
address = "0.0.0.0";
|
|
port = 8080;
|
|
settings = {
|
|
server_url = "https://${domain}";
|
|
dns_config = {
|
|
base_domain = baseDomain;
|
|
domains = [ baseDomain ];
|
|
};
|
|
};
|
|
};
|
|
environment.systemPackages = [ config.services.headscale.package ];
|
|
services.nginx.virtualHosts.${domain} = {
|
|
forceSSL = enableSSL;
|
|
enableACME = enableSSL;
|
|
locations."/" = {
|
|
proxyPass = "http://localhost:${ toString config.services.headscale.port }";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
} |