mirror of
https://github.com/archtechx/nix.git
synced 2025-12-12 03:24:02 +00:00
Authenticated Origin Pulls
This commit is contained in:
parent
929a4b44c8
commit
b3087cabea
2 changed files with 52 additions and 3 deletions
|
|
@ -1,4 +1,4 @@
|
|||
{ name, phpPackage, domains ? [], ssl ? false, extraNginxConfig ? null, sshKeys ? null, extraPackages ? [], queue ? false, queueArgs ? "", generateSshKey ? true, poolSettings ? {
|
||||
{ name, phpPackage, domains ? [], ssl ? false, cloudflareOnly ? false, extraNginxConfig ? null, sshKeys ? null, extraPackages ? [], queue ? false, queueArgs ? "", generateSshKey ? true, poolSettings ? {
|
||||
"pm" = "dynamic";
|
||||
"pm.max_children" = 8;
|
||||
"pm.start_servers" = 2;
|
||||
|
|
@ -115,6 +115,13 @@ in {
|
|||
charset utf-8;
|
||||
index index.php;
|
||||
error_page 404 /index.php;
|
||||
${lib.optionalString cloudflareOnly ''
|
||||
ssl_verify_client on;
|
||||
ssl_client_certificate ${pkgs.fetchurl {
|
||||
url = "https://developers.cloudflare.com/ssl/static/authenticated_origin_pull_ca.pem";
|
||||
sha256 = "0hxqszqfzsbmgksfm6k0gp0hsx9k1gqx24gakxqv0391wl6fsky1";
|
||||
}};
|
||||
''}
|
||||
${lib.optionalString (extraNginxConfig != null) extraNginxConfig}
|
||||
'';
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue