This commit is contained in:
@@ -99,7 +99,7 @@ in
|
|||||||
# '';
|
# '';
|
||||||
# serviceConfig.Type = "oneshot";
|
# serviceConfig.Type = "oneshot";
|
||||||
# unitConfig.ConditionPathExists = "!${livekitKeyFile}";
|
# unitConfig.ConditionPathExists = "!${livekitKeyFile}";
|
||||||
};
|
# };
|
||||||
|
|
||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
allowedTCPPorts = [ 7880 7881 5349 ];
|
allowedTCPPorts = [ 7880 7881 5349 ];
|
||||||
|
|||||||
@@ -391,36 +391,36 @@ in
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
"matrixrtc.atri.dad" = {
|
# "matrixrtc.atri.dad" = {
|
||||||
enableACME = true;
|
# enableACME = true;
|
||||||
forceSSL = true;
|
# forceSSL = true;
|
||||||
|
|
||||||
# lk-jwt-service (handles its own CORS)
|
# # lk-jwt-service (handles its own CORS)
|
||||||
locations."~ ^(/sfu/get|/healthz)" = {
|
# locations."~ ^(/sfu/get|/healthz)" = {
|
||||||
priority = 400;
|
# priority = 400;
|
||||||
proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
|
# proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
|
||||||
extraConfig = ''
|
# extraConfig = ''
|
||||||
proxy_set_header Host $host;
|
# proxy_set_header Host $host;
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
# proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
# proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
'';
|
# '';
|
||||||
};
|
# };
|
||||||
|
|
||||||
# livekit
|
# # livekit
|
||||||
locations."/" = {
|
# locations."/" = {
|
||||||
proxyPass = "http://[::1]:${toString config.services.livekit.settings.port}";
|
# proxyPass = "http://[::1]:${toString config.services.livekit.settings.port}";
|
||||||
proxyWebsockets = true;
|
# proxyWebsockets = true;
|
||||||
extraConfig = ''
|
# extraConfig = ''
|
||||||
proxy_set_header Host $host;
|
# proxy_set_header Host $host;
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
# proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
# proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
proxy_read_timeout 300;
|
# proxy_read_timeout 300;
|
||||||
proxy_send_timeout 300;
|
# proxy_send_timeout 300;
|
||||||
'';
|
# '';
|
||||||
};
|
# };
|
||||||
};
|
# };
|
||||||
|
|
||||||
"atash.dev" = {
|
"atash.dev" = {
|
||||||
enableACME = true;
|
enableACME = true;
|
||||||
|
|||||||
Reference in New Issue
Block a user