mirror of
https://github.com/vale981/phoebe
synced 2025-03-04 17:31:41 -05:00
tunnels: Respect `phoebe.security.enable' like other services
This allows one to deploy to a virtual machine for testing.
This commit is contained in:
parent
3399464b17
commit
ea9e99d760
1 changed files with 3 additions and 3 deletions
|
@ -58,8 +58,8 @@ let
|
|||
# Create an nginx virtual host for a tunnel account:
|
||||
virtualHost = account: tunnel: {
|
||||
"${tunnel.subdomain}.${cfg.hostName}" = {
|
||||
forceSSL = true;
|
||||
enableACME = true;
|
||||
forceSSL = config.phoebe.security.enable;
|
||||
enableACME = config.phoebe.security.enable;
|
||||
root = "/var/empty";
|
||||
locations."/".proxyPass = "http://127.0.0.1:${toString tunnel.serverPort}";
|
||||
};
|
||||
|
@ -133,7 +133,7 @@ in
|
|||
# Configure a web server to reverse proxy connections to SSH:
|
||||
services.nginx = {
|
||||
enable = true;
|
||||
recommendedTlsSettings = true;
|
||||
recommendedTlsSettings = config.phoebe.security.enable;
|
||||
recommendedOptimisation = true;
|
||||
recommendedGzipSettings = true;
|
||||
recommendedProxySettings = true;
|
||||
|
|
Loading…
Add table
Reference in a new issue