Project-A/project-flake
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

increased nginx proxy parameters

Browse source
This commit is contained in:
emptyynes 2025-09-19 10:08:16 +07:00
parent d12274102a
commit 694a4e7605
7 changed files with 23 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

3
secret.nix
View file

@ -25,6 +25,7 @@ in {
secret = { secret = {
artemisia = { artemisia = {
marzban = marzban-config; marzban = marzban-config;
yggdrasil.PrivateKey = mkOption { type = str; default = ""; };
}; };
mio = { mio = {
marzban = marzban-config; marzban = marzban-config;
@ -38,6 +39,8 @@ in {
common = { common = {
yggdrasil = { yggdrasil = {
reine = mkOption { type = str; default = ""; }; reine = mkOption { type = str; default = ""; };
artemisia = mkOption { type = str; default = ""; };
password = mkOption { type = str; default = ""; };
}; };
}; };
}; };

4
servers/artemisia/main.nix
View file

@ -9,7 +9,9 @@
networking.hostName = "artemisia"; networking.hostName = "artemisia";
system.stateVersion = "25.05"; system.stateVersion = "25.05";
services.yggdrasil.persistentKeys = true; services.yggdrasil.settings.PrivateKey = secret.yggdrasil.PrivateKey;
services.yggdrasil.persistentKeys = false;
marzban = { marzban = {
env = { env = {
UVICORN_HOST = "artemisia.project-a.space"; UVICORN_HOST = "artemisia.project-a.space";

4
servers/artemisia/nginx.nix
View file

@ -39,9 +39,9 @@
listen [::0]:443; listen [::0]:443;
proxy_pass $name; proxy_pass $name;
ssl_preread on; ssl_preread on;
proxy_connect_timeout 1s; proxy_connect_timeout 30s;
proxy_timeout 1h; proxy_timeout 1h;
proxy_buffer_size 16k; proxy_buffer_size 64k;
} }
''; '';
}; };

3
servers/common/yggdrasil.nix
View file

@ -5,8 +5,7 @@
enable = true; enable = true;
settings = { settings = {
Peers = [ Peers = [
"tls://kuber.project-a.space:666" "tls://artemisia.project-a.space:666"
"tls://arti.project-a.space:666"
"tls://reine.project-a.space:666" "tls://reine.project-a.space:666"
]; ];
Listen = [ Listen = [

4
servers/mio/nginx.nix
View file

@ -28,9 +28,9 @@
listen [::0]:443; listen [::0]:443;
proxy_pass $name; proxy_pass $name;
ssl_preread on; ssl_preread on;
proxy_connect_timeout 1s; proxy_connect_timeout 30s;
proxy_timeout 1h; proxy_timeout 1h;
proxy_buffer_size 16k; proxy_buffer_size 64k;
} }
''; '';
}; };

9
servers/reine/main.nix
View file

@ -11,5 +11,14 @@
services.yggdrasil.settings.PrivateKey = secret.yggdrasil.PrivateKey; services.yggdrasil.settings.PrivateKey = secret.yggdrasil.PrivateKey;
services.yggdrasil.persistentKeys = false; services.yggdrasil.persistentKeys = false;
hardware.amdgpu.opencl.enable = true; hardware.amdgpu.opencl.enable = true;
hardware.graphics.extraPackages = with pkgs; [ rocmPackages.clr.icd ];
systemd.tmpfiles.rules = [
"L+ /opt/rocm/hip - - - - ${pkgs.rocmPackages.clr}"
];
hardware.graphics.enable = true;
hardware.graphics.enable32Bit = true;
hardware.amdgpu.overdrive.enable = true;
hardware.amdgpu.overdrive.ppfeaturemask = "0xffffffff";
environment.systemPackages = with pkgs; [ clinfo mesa.opencl ];
system.stateVersion = "25.05"; system.stateVersion = "25.05";
} }

4
servers/vanessa/nginx.nix
View file

@ -28,9 +28,9 @@
listen [::0]:443; listen [::0]:443;
proxy_pass $name; proxy_pass $name;
ssl_preread on; ssl_preread on;
proxy_connect_timeout 1s; proxy_connect_timeout 30s;
proxy_timeout 1h; proxy_timeout 1h;
proxy_buffer_size 16k; proxy_buffer_size 64k;
} }
''; '';
}; };