From ce7fb7ddd3267291a8d692cc6381dad606288aa5 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Mon, 15 Jun 2026 13:49:27 +0200
Subject: revamped proxy configs

---
 os/srv/monero.nix | 36 ++++++++++++++++++++----------------
 1 file changed, 20 insertions(+), 16 deletions(-)

(limited to 'os/srv/monero.nix')

diff --git a/os/srv/monero.nix b/os/srv/monero.nix
index 4e74432..f00413d 100644
--- a/os/srv/monero.nix
+++ b/os/srv/monero.nix
@@ -12,7 +12,13 @@ in
 {
   options.os.srv.monero = {
     wallet.enable = lib.mkEnableOption "enables the monero wallet";
-    service.enable = lib.mkEnableOption "enables hosting a monero node";
+    service = {
+      enable = lib.mkEnableOption "enables hosting a monero node";
+      proxyConfig = lib.mkOption {
+        type = lib.types.attrs;
+        default = { };
+      };
+    };
   };
 
   config = lib.mkMerge [
@@ -21,10 +27,6 @@ in
     })
     (lib.mkIf cfg.service.enable {
       assertions = [
-        {
-          assertion = config.os.srv.nginx.enable;
-          message = "Hosting a Monero node requires nginx for proxying";
-        }
         {
           assertion = config.os.srv.sops.enable;
           message = "Required for password secure password storing";
@@ -55,19 +57,21 @@ in
         };
       };
 
-      services.nginx.virtualHosts."xmr.${masterDomain}" = {
-        enableACME = true;
-        forceSSL = true;
+      os.srv.monero.service.proxyConfig = {
+        "xmr.${masterDomain}" = {
+          enableACME = true;
+          forceSSL = true;
 
-        locations."/" = {
-          proxyPass = "http://127.0.0.1:18081";
-          extraConfig = ''
-            proxy_read_timeout 600s;
-            proxy_send_timeout 600s;
-            client_max_body_size 50m;
+          locations."/" = {
+            proxyPass = "http://${config.os.core.network.ips.vm9-relays}:18081";
+            extraConfig = ''
+              proxy_read_timeout 600s;
+              proxy_send_timeout 600s;
+              client_max_body_size 50m;
 
-            ${securityTemplates.restrictToInternal}
-          '';
+              ${securityTemplates.restrictToInternal}
+            '';
+          };
         };
       };
 
-- 
cgit v1.3