atridad/haschel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added coder
All checks were successful
Deploy NixOS / deploy (push) Successful in 40s
Details

Browse Source
This commit is contained in:
Atridad Lahiji
2026-03-08 13:42:46 -06:00
parent 13798f00f1
commit 2fae693f1e
1 changed files with 27 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

53
modules/proxy.nix
View File

@@ -73,7 +73,7 @@ in
};
extraConfig = ''
(common_config) {
(strict_config) {
encode zstd gzip
defender garbage {
@@ -84,7 +84,7 @@ in
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
X-Robots-Tag "noimageindex, noodp, noydir, noindex, nofollow"
X-Robots-Tag "noimageindex, noodp, noydir, nofollow"
Referrer-Policy "strict-origin-when-cross-origin"
Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.atri.dad https://*.atash.dev; font-src 'self' data:; connect-src 'self' wss: https://*.atri.dad https://*.atash.dev; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
-Server
@@ -99,7 +99,7 @@ in
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
X-Robots-Tag "noimageindex, noodp, noydir, noindex, nofollow"
X-Robots-Tag "noimageindex, noodp, noydir, nofollow"
Referrer-Policy "strict-origin-when-cross-origin"
Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' wss: https://*.atri.dad https://*.atash.dev; media-src 'self' https://rogers-hls.leanstream.co; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
-Server
@@ -108,7 +108,7 @@ in
}
${atriDotDad} {
import common_config
import strict_config
handle /.well-known/matrix/server {
header Content-Type application/json
@@ -129,31 +129,32 @@ in
}
}
analytics.${atriDotDad} { ${mkProxy 30060 "common_config"} }
ascently.${atriDotDad} { ${mkProxy 8838 "common_config"} }
chef.${atriDotDad} { ${mkProxy 30111 "common_config"} }
democlimb.${atriDotDad} { ${mkProxy 8008 "common_config"} }
fedi.${atriDotDad} { ${mkProxy 8181 "common_config"} }
gist.${atriDotDad} { ${mkProxy 1227 "common_config"} }
git.${atriDotDad} { ${mkProxy 30010 "common_config"} }
links.${atriDotDad} { ${mkProxy 30243 "common_config"} }
memos.${atriDotDad} { ${mkProxy 30311 "common_config"} }
analytics.${atriDotDad} { ${mkProxy 30060 "strict_config"} }
ascently.${atriDotDad} { ${mkProxy 8838 "strict_config"} }
chef.${atriDotDad} { ${mkProxy 30111 "strict_config"} }
democlimb.${atriDotDad} { ${mkProxy 8008 "strict_config"} }
fedi.${atriDotDad} { ${mkProxy 8181 "strict_config"} }
gist.${atriDotDad} { ${mkProxy 1227 "strict_config"} }
git.${atriDotDad} { ${mkProxy 30010 "strict_config"} }
links.${atriDotDad} { ${mkProxy 30243 "strict_config"} }
memos.${atriDotDad} { ${mkProxy 30311 "strict_config"} }
mermaid.${atriDotDad} { ${mkProxy 8280 "relaxed_config"} }
msrc.${atriDotDad} { ${mkProxy 3311 "common_config"} }
openclimb.${atriDotDad} { ${mkProxy 1337 "common_config"} }
photos.${atriDotDad} { ${mkProxy 30041 "common_config"} }
abs.${atriDotDad} { ${mkProxy 30067 "common_config"} }
s3.${atriDotDad} { ${mkProxy 30188 "common_config"} }
msrc.${atriDotDad} { ${mkProxy 3311 "strict_config"} }
openclimb.${atriDotDad} { ${mkProxy 1337 "strict_config"} }
photos.${atriDotDad} { ${mkProxy 30041 "strict_config"} }
abs.${atriDotDad} { ${mkProxy 30067 "strict_config"} }
s3.${atriDotDad} { ${mkProxy 30188 "strict_config"} }
search.${atriDotDad} { ${mkProxy 30053 "relaxed_config"} }
vault.${atriDotDad} { ${mkProxy 30032 "common_config"} }
vids.${atriDotDad} { ${mkProxy 31008 "common_config"} }
music.${atriDotDad} { ${mkProxy 30043 "common_config"} }
books.${atriDotDad} { ${mkProxy 31067 "common_config"} }
tv.${atriDotDad} { ${mkProxy 30013 "common_config"} }
vault.${atriDotDad} { ${mkProxy 30032 "strict_config"} }
vids.${atriDotDad} { ${mkProxy 31008 "strict_config"} }
music.${atriDotDad} { ${mkProxy 30043 "strict_config"} }
books.${atriDotDad} { ${mkProxy 31067 "strict_config"} }
tv.${atriDotDad} { ${mkProxy 30013 "strict_config"} }
code.${atriDotDad} { ${mkProxy 30145 "strict_config"} }
ripkyle.org { ${mkProxy 4321 "common_config"} }
${atashDotDev} { ${mkProxy 6969 "common_config"} }
chronus.${atashDotDev} { ${mkProxy 7337 "common_config"} }
ripkyle.org { ${mkProxy 4321 "strict_config"} }
${atashDotDev} { ${mkProxy 6969 "strict_config"} }
chronus.${atashDotDev} { ${mkProxy 7337 "strict_config"} }
${matrixDomain} {
request_body {