mc-fucker/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

committed powerdns web changes

Browse source
This commit is contained in:
mc-fucker 2025-03-10 11:13:33 +01:00
parent f1feebbbca
commit 35a5f48150
2 changed files with 24 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
modules/powerdns-admin.nix
View file

@ -6,7 +6,7 @@ let
in
{
imports = [
./podman.nix
#./podman.nix
./podman-postgresql.nix # for the database
#./nginx.nix # for the webserver
];
@ -14,24 +14,24 @@ in
sops.secrets."powerdns-admin/db" = { };
sops.secrets."powerdns-admin/env" = { };
#services.podman-postgresql."${pdnsa_database}" = {
# enable = true;
# image = "docker.io/library/postgres:15-alpine";
# port = (lib.strings.toInt webdbport);
# passwordFile = config.sops.secrets."powerdns-admin/db".path;
#};
services.podman-postgresql."powerdnsadmin" = {
enable = true;
image = "docker.io/library/postgres:15-alpine";
port = (lib.strings.toInt webdbport);
passwordFile = config.sops.secrets."powerdns-admin/db".path;
};
#virtualisation.oci-containers.containers.powerdnsadmin = {
# image = "docker.io/powerdnsadmin/pda-legacy";
# environment = {
# TZ = "Europe/Berlin";
# };
# environmentFiles = [ config.sops.secrets."powerdns-admin/env".path ];
# ports = [
# "${webport}:80"
# ];
# extraOptions = cfg.podman.extraOptions;
#};
virtualisation.oci-containers.containers.powerdnsadmin = {
image = "docker.io/powerdnsadmin/pda-legacy";
environment = {
TZ = "Europe/Berlin";
};
environmentFiles = [ config.sops.secrets."powerdns-admin/env".path ];
ports = [
"${webport}:80"
];
extraOptions = cfg.podman.extraOptions;
};
}
# vim: set et ts=2 sw=2 ai:

8
modules/powerdns-web.nix
View file

@ -1,10 +1,14 @@
{ ... }:
let
domain = "powerdns.mc-fucker.cool";
pdnsa_host = "100.64.0.6";
pdnsa_port = "8000";
#pdnsa_host = "100.64.0.6";
pdnsa_host = "127.0.0.1";
pdnsa_port = "8282";
in
{
imports = [ ./nginx.nix ];
services.nginx.virtualHosts."${domain}" = {
forceSSL = true;
enableACME = true;