{tsuki/dosei}: set up wstunnel
This commit is contained in:
@@ -6,6 +6,7 @@
|
||||
./services/avahi.nix
|
||||
./services/docker.nix
|
||||
./services/jenkins.nix
|
||||
./services/wstunnel.nix
|
||||
];
|
||||
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
|
27
hosts/dosei/services/wstunnel.nix
Normal file
27
hosts/dosei/services/wstunnel.nix
Normal file
@@ -0,0 +1,27 @@
|
||||
{ config, ... }:
|
||||
{
|
||||
imports = [
|
||||
../../../modules/wstunnel.nix
|
||||
];
|
||||
disabledModules = [
|
||||
"services/networking/wstunnel.nix"
|
||||
];
|
||||
|
||||
# NOTE: Contains
|
||||
# - WSTUNNEL_HTTP_UPGRADE_PATH_PREFIX
|
||||
# - WSTUNNEL_RESTRICT_HTTP_UPGRADE_PATH_PREFIX
|
||||
sops.secrets."wstunnel/http-upgrade-path-prefix-envvars" = {
|
||||
sopsFile = ../../../secrets/common.yaml;
|
||||
};
|
||||
|
||||
services.wstunnel = {
|
||||
enable = true;
|
||||
clients."ws-tsuki" = {
|
||||
connectTo = "wss://ws.nani.wtf";
|
||||
localToRemote = [
|
||||
"tcp://10022:localhost:22"
|
||||
];
|
||||
environmentFile = config.sops.secrets."wstunnel/http-upgrade-path-prefix-envvars".path;
|
||||
};
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user