summaryrefslogtreecommitdiffstats
path: root/makefu/2configs/nginx
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2017-12-18 21:26:45 +0100
committermakefu <github@syntax-fehler.de>2017-12-18 21:26:45 +0100
commit1fff5ae3724a811c6205e1e7abf5052e05412757 (patch)
tree12d8121e322033ba0220dd7db5c7895fed476614 /makefu/2configs/nginx
parentaf308642031f971bc30c5694385eb7af1e9ea618 (diff)
ma nginx: add vpn-ws prototype
Diffstat (limited to 'makefu/2configs/nginx')
-rw-r--r--makefu/2configs/nginx/euer.blog.vpn.nix35
1 files changed, 35 insertions, 0 deletions
diff --git a/makefu/2configs/nginx/euer.blog.vpn.nix b/makefu/2configs/nginx/euer.blog.vpn.nix
new file mode 100644
index 000000000..b3db0bc60
--- /dev/null
+++ b/makefu/2configs/nginx/euer.blog.vpn.nix
@@ -0,0 +1,35 @@
+{pkgs, options, ... }:
+let
+ pkg = pkgs.vpn-ws;
+ uid = "nginx";
+ gid = "nginx";
+ ip = "${pkgs.iproute}/bin/ip";
+in {
+ services.nginx.virtualHosts."euer.krebsco.de".locations."/vpn" = {
+ # TODO client auth
+ extraConfig = ''
+ uwsgi_pass unix:/run/vpn.sock;
+ include ${pkgs.nginx}/conf/uwsgi_params;
+ '';
+ };
+
+ networking.interfaces.vpnws = {
+ virtual = true;
+ virtualType = "tap";
+ };
+ systemd.services.vpnws = {
+ wantedBy = [ "multi-user.target" ];
+ after = [ "network.target" ];
+ serviceConfig = {
+ Restart = "always";
+ PrivateTmp = true;
+ ExecStartPre = pkgs.writeDash "vpnws-pre" ''
+ ${ip} link set vpnws up
+ ${ip} addr add 10.244.1.1/24 dev vpnws || :
+ '';
+ ExecStart = pkgs.writeDash "vpnws-start" ''
+ ${pkg}/bin/vpn-ws --tuntap vpnws /run/vpn.sock
+ '';
+ };
+ };
+}