diff options
| -rw-r--r-- | adonis/autopush/default.nix | 45 | ||||
| -rw-r--r-- | secrets.yaml | 7 |
2 files changed, 33 insertions, 19 deletions
diff --git a/adonis/autopush/default.nix b/adonis/autopush/default.nix index 2cd112c..d24aadc 100644 --- a/adonis/autopush/default.nix +++ b/adonis/autopush/default.nix @@ -12,6 +12,7 @@ in { sops.secrets = { "autopush/autoconnect" = {}; "autopush/autoendpoint" = {}; + "autopush/mollysocket" = {}; }; environment.systemPackages = [autopush]; @@ -49,25 +50,37 @@ in { }; }; }; + + services.mollysocket = { + enable = true; + settings = { + allowed_endpoints = ["https://${domain}"]; + webserver = true; + }; + }; + services.nginx.virtualHosts.${domain} = { forceSSL = true; enableACME = true; - locations."/" = { - proxyPass = "http://127.0.0.1:8080"; - extraConfig = '' - proxy_http_version 1.1; - proxy_set_header Host $host; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_connect_timeout 3m; - proxy_send_timeout 3m; - proxy_read_timeout 3m; - client_max_body_size 0; - proxy_buffering off; - proxy_request_buffering off; - proxy_redirect off; - ''; + locations = { + "/" = { + proxyPass = "http://127.0.0.1:8080"; + extraConfig = '' + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_connect_timeout 3m; + proxy_send_timeout 3m; + proxy_read_timeout 3m; + client_max_body_size 0; + proxy_buffering off; + proxy_request_buffering off; + proxy_redirect off; + ''; + }; + "/mollysocket".proxyPass = "http://127.0.0.1:8020"; }; }; services.nginx.virtualHosts."updates.${domain}" = { diff --git a/secrets.yaml b/secrets.yaml index 62d96ab..269a1eb 100644 --- a/secrets.yaml +++ b/secrets.yaml @@ -11,6 +11,7 @@ msci: autopush: autoconnect: ENC[AES256_GCM,data:buWI+UAKsKL/H4FVJO277+URii4FalbXKBiNLhSZi51wJ9rbTRTCKUYXsRZ47k/2hSa5LEfHUDCUfBeBnUn50SD5JrGvyVB1,iv:GnVy3VNhpogvM2tfwqn7zT7MPNk3vojnr/q40coS/J4=,tag:lyagPBXHR686nSIDwbUHFQ==,type:str] autoendpoint: ENC[AES256_GCM,data:SuYJ3ivJNydAAbFKRaVl79dZO4TS1UbmyHENZWCp34DS0p3YSoPoru5q71x/9VcjmEw1i5J3XGgfxZyX3OX+zWOArPZf,iv:IXTk+PsIc8p4rYYndkVe0M8g/YjZo8GbOQpnp+3yRQ4=,tag:zgMCVlMl91FgLSZl43eQkw==,type:str] + mollysocket: ENC[AES256_GCM,data:u1g177Bj7tNHYOcB+Jh6oGqPuV63fg==,iv:T+haLX3QJRQAH8CJ/LkjSjKTWtmxkx10U+29BfcC3FA=,tag:lVp2oAYFPh2PtC9IYoHLsg==,type:str] sops: age: - enc: | @@ -40,7 +41,7 @@ sops: AjeKUiRMROq4PMJYmWXDjToBlvdOFq9oYNl+1mNlcQTMbEkCoqIfrw== -----END AGE ENCRYPTED FILE----- recipient: age1ra6vn99y233pxrlpcwpuwl7vc8ma5y4ucg5jlkfylh6kudsxzehqznqmet - lastmodified: "2026-07-19T14:36:34Z" - mac: ENC[AES256_GCM,data:u/V0WANREw22K6pk4PC8b3eVIGlZiVVD7qPMQjnBapga+ImKkpbvNNE1BtMV0SVbbcA0bMYo0ZYg1Jfky/Rt+llJJYdgOScRB6QE2yADMBr/hufveEqQA58noV34zhkCeXTKVVSRpxCgCDVo/qCkr/loEfDFvGa9DoRhvcE8500=,iv:Fu/wqLq8dcMiDnmREuS5zeDkQ9rODIBvEkHtJXS8hbk=,tag:x7T9yFluyJn+vMoB8ioKMQ==,type:str] + lastmodified: "2026-08-06T11:26:54Z" + mac: ENC[AES256_GCM,data:PV7KGlXja5gBdZWERw2lrKuqz0eLfEXGesG0Dl8XdSXWCaqx1WIIZPpgJmmO9kQv7fZCLqE4hGMo5v402A+DIxqoviSKUWpKt80nmaUDGtwZKiEVeSg3TH+Gt0n/mpE/VWIISpe1S79muhFmSvptNtlm91HvgHjVgi9/OGLTwdg=,iv:L6cI3ZJE4D6uY7jay+YshN01EVJaD/7G/u8OzEPgstM=,tag:k1DmXWvTRmOpMpD9mDffWA==,type:str] unencrypted_suffix: _unencrypted - version: 3.13.2 + version: 3.13.3 |