2021-12-07 20:51:25 +02:00
|
|
|
{ config, lib, tools, ... }:
|
|
|
|
|
let
|
|
|
|
|
inherit (tools.meta) domain;
|
|
|
|
|
apiAddr = "api.${domain}";
|
|
|
|
|
proxyTarget = "http://127.0.0.1:${config.portsStr.api}";
|
|
|
|
|
proxy = tools.nginx.vhosts.proxy proxyTarget;
|
|
|
|
|
in
|
|
|
|
|
{
|
2022-05-30 23:33:12 +03:00
|
|
|
# n8n uses "Sustainable Use License"
|
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
|
|
2021-12-07 20:51:25 +02:00
|
|
|
reservePortsFor = [ "api" ];
|
|
|
|
|
|
|
|
|
|
services.n8n = {
|
|
|
|
|
enable = true;
|
|
|
|
|
settings = {
|
|
|
|
|
port = config.ports.api;
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
systemd.services.n8n.environment = {
|
|
|
|
|
N8N_LISTEN_ADDRESS = "127.0.0.1";
|
|
|
|
|
N8N_ENDPOINT_WEBHOOK = "api";
|
|
|
|
|
N8N_ENDPOINT_WEBHOOK_TEST = "test";
|
|
|
|
|
WEBHOOK_URL = "https://${apiAddr}";
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
services.nginx.virtualHosts."${apiAddr}" = lib.recursiveUpdate proxy {
|
|
|
|
|
locations."/api" = {
|
|
|
|
|
proxyPass = proxyTarget;
|
|
|
|
|
extraConfig = "auth_request off;";
|
|
|
|
|
};
|
|
|
|
|
locations."/test" = {
|
|
|
|
|
proxyPass = proxyTarget;
|
|
|
|
|
extraConfig = "auth_request off;";
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
services.oauth2_proxy.nginx.virtualHosts = [ apiAddr ];
|
|
|
|
|
}
|
