diff options
| author | schererleander <leander@schererleander.de> | 2025-12-19 15:57:40 +0100 |
|---|---|---|
| committer | Leander Scherer <leander@schererleander.de> | 2026-01-08 19:08:12 +0100 |
| commit | 75129ca37657fed13d04bc647432274f7ccc139d (patch) | |
| tree | ef52f7881295bcdaedb030544880ce662fa46c13 /hosts/sachiel/configuration.nix | |
| parent | 7802a0e2db45cf8326458dcce76913d9c06d9fa4 (diff) | |
configure labwc
Diffstat (limited to 'hosts/sachiel/configuration.nix')
| -rw-r--r-- | hosts/sachiel/configuration.nix | 28 |
1 files changed, 23 insertions, 5 deletions
diff --git a/hosts/sachiel/configuration.nix b/hosts/sachiel/configuration.nix index 5cd0298..7bb5aca 100644 --- a/hosts/sachiel/configuration.nix +++ b/hosts/sachiel/configuration.nix @@ -52,12 +52,12 @@ system.autoUpgrade = { enable = true; flake = "github:schererleander/nix#${host}"; - flags = [ - "--update-input" - "nixpkgs" - "--no-write-lock-file" + flags = [ + "--update-input" + "nixpkgs" + "--no-write-lock-file" "-L" # print build logs - ]; + ]; allowReboot = true; rebootWindow = { @@ -158,6 +158,16 @@ sslCertificate = "/etc/ssl/schererleander.de/fullchain.pem"; sslCertificateKey = "/etc/ssl/schererleander.de/privkey.key"; }; + + virtualHosts."analytics.schererleander.de" = { + forceSSL = true; + sslCertificate = "/etc/ssl/schererleander.de/fullchain.pem"; + sslCertificateKey = "/etc/ssl/schererleander.de/privkey.key"; + locations."/" = { + proxyPass = "http://127.0.0.1:${toString config.services.plausible.server.port}"; + proxyWebsockets = true; + }; + }; }; services.site = { @@ -259,6 +269,14 @@ ''; }; + services.plausible = { + enable = true; + server = { + baseUrl = "https://analytics.scherereleander.de"; + secretKeybaseFile = "/etc/plausible-secret-keybase"; + }; + }; + security.auditd.enable = true; security.audit = { enable = true; |