blob: 7f8db3efea7507243103d09fabeb3182bc4844aa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
# This module configures a reverse proxy for the various services that are
# exposed to the internet.
{config, ...}: let
# The internal port where qBittorrents web UI will be served.
qbWebUiPort = 8082;
in {
services.qbittorrent = {
openFirewall = false;
port = qbWebUiPort;
settings = {
Preferences = {
# Used in conjunction with the --webui-port flag (via services.qbittorrent.port)
# We do NOT want qBittorrent to open the webui's port on the router,
# since all trafic will be going through the reverse proxy anyways.
"WebUI\\UseUPnP" = false;
};
};
};
# Use NGINX as a reverse proxy.
services.nginx = {
virtualHosts."qbittorrent.${config.linus.local-dns.domain}" = {
locations."/" = {
proxyPass = "http://localhost:${toString qbWebUiPort}";
recommendedProxySettings = true;
};
};
virtualHosts."jellyfin.${config.linus.local-dns.domain}" = {
locations."/" = {
# This is the "static port" of the HTTP web interface.
#
# See: https://jellyfin.org/docs/general/networking/#port-bindings
proxyPass = "http://localhost:8096";
recommendedProxySettings = true;
};
# See: https://jellyfin.org/docs/general/networking/nginx
# See: https://nginx.org/en/docs/http/websocket.html
locations."/socket" = {
proxyPass = "http://localhost:8096";
recommendedProxySettings = true;
extraConfig = ''
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
'';
};
};
};
linus.local-dns.subdomains = [
"qbittorrent"
"jellyfin"
];
}
|
