add a netboot vhost to eris
Graham Christensen committed
Sep 29, 2022 at 19:21 UTC
47875a359da1105c028b7f9c2c6cf7e321f6d580
1 file changed
+12
-1
delft/eris.nix
+12
-1
@@ -1,4 +1,4 @@
1
-{ resources, config, lib, pkgs, ... }:
1
+{ resources, options, config, lib, pkgs, ... }:
2
let
3
inherit (lib) filterAttrs flip mapAttrsToList;
4
in
@@ -38,6 +38,16 @@ in
38
services.nginx = {
39
enable = true;
40
recommendedProxySettings = true;
41
+
42
+ sslProtocols = "TLSv1.2 TLSv1.3"; # iPXE only supports TLSv1.2
43
+ sslCiphers = options.services.nginx.sslCiphers.default + ":AES256-SHA256"; # iPXE needs AES256-SHA256
44
+
45
+ virtualHosts."netboot.nixos.org" = {
46
+ enableACME = false;
47
+ forceSSL = false;
48
+ locations."/".proxyPass = "http://127.0.0.1:3000/";
49
+ };
50
+
51
virtualHosts."monitoring.nixos.org" = {
52
enableACME = true;
53
forceSSL = true;
@@ -530,6 +540,7 @@ in
540
"https://tarballs.nixos.org"
541
"https://weekly.nixos.org"
542
"https://www.nixos.org"
543
+ "https://netboot.nixos.org"
544
])
545
]
546
)