sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add proxy-home vpn to accelerate traffic between local nodes

Browse source
This commit is contained in:
oddlama 2024-05-20 01:35:01 +02:00
parent 34fd783e60
commit b01c521830
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
22 changed files with 123 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/ward/guests/adguardhome.nix
View file

@ -84,11 +84,11 @@ in {
# Use the local mirror-proxy for some services (not necessary, just for speed)
{
domain = nodes.sentinel.config.networking.providedDomains.grafana;
answer = "192.168.1.1";
answer = "192.168.1.4"; # web-proxy
}
{
domain = nodes.sentinel.config.networking.providedDomains.immich;
answer = "192.168.1.1";
answer = "192.168.1.4"; # web-proxy
}
];
filters = [

4
hosts/ward/guests/forgejo.nix
View file

@ -29,7 +29,9 @@ in {
nodes.sentinel = {
networking.providedDomains.forgejo = forgejoDomain;
# Make sure to masquerade 9922 (wan) -> 22 (proxy-sentinel)
# Rewrite destination addr with dnat on incoming connections
# and masquerade responses to make them look like they originate from this host.
# - 9922 (wan) -> 22 (proxy-sentinel)
networking.nftables.chains = {
postrouting.to-forgejo = {
after = ["hook"];

6
hosts/ward/guests/web-proxy.nix
View file

@ -1,6 +1,8 @@
{config, ...}: let
inherit (config.repo.secrets.local) acme;
in {
wireguard.proxy-home.client.via = "ward";
age.secrets.acme-cloudflare-dns-token = {
rekeyFile = config.node.secretsDir + "/acme-cloudflare-dns-token.age";
mode = "440";
@ -27,10 +29,6 @@ in {
inherit (acme) certs wildcardDomains;
};
#nodes.sentinel = {
# # port forward 80,443 (ward) to 80,443 (web-proxy)
#};
users.groups.acme.members = ["nginx"];
services.nginx.enable = true;
services.nginx.recommendedSetup = true;