1
0
Fork 0
mirror of https://github.com/archtechx/nix.git synced 2025-12-12 11:24:04 +00:00

Compare commits

..

No commits in common. "e87e66625231ac75f60619fe35590b180011ffa2" and "1731e68e5f3ae06a10f82b8004d0d70c75781318" have entirely different histories.

2 changed files with 0 additions and 24 deletions

View file

@ -2,9 +2,6 @@
A collection of scripts and configuration files for our use of Nix tooling.
> [!NOTE]
> You may want to read [**this article**](https://stancl.substack.com/p/deploying-laravel-on-nixos) for more detailed information.
## Setting up a new server
This is just for getting a working NixOS installation with `/etc/nixos/configuration.nix` deployed onto a generic cloud VM.
@ -174,24 +171,6 @@ The module doesn't handle www redirects automatically. This may be added in the
At this time, I'd recommend handling basic redirects like that on Cloudflare.
### Default nginx server
Out of the box, if nginx cannot match an incoming request's host to a specific virtual host it will
just use _some_ vhost. You can prevent behavior that by adding a module like this:
```nix
{
services.nginx.virtualHosts."catchall" = {
default = true;
locations."/".return = "444";
rejectSSL = true;
};
}
```
This creates a `default_server` vhost that returns an empty response to any request. The name of the
vhost is irrelevant.
### Authenticated Origin Pulls (AOP)
To make your sites reachable ONLY using Cloudflare, you can use [authenticated origin

View file

@ -40,10 +40,7 @@ in {
networking.firewall.allowedTCPPorts = [ 80 ] ++ lib.optionals ssl [ 443 ];
# Create welcome message for user
# todo: the created /etc file should ideally be 0750
environment.etc."laravel-${name}-bashrc".text = ''
export PATH="$HOME/.config/composer/vendor/bin/:$PATH"
# Laravel site welcome message
echo "Welcome to ${name} Laravel site!"
echo "Domains: ${lib.concatStringsSep ", " domains}"