add internal nginx config

homelab-services/nimh-static/flake.nix

@@ -79,7 +79,6 @@
                   ];
 
                 locations."/" = {
-                  # Default k3s port?
                   proxyPass = "http://127.0.0.1:30080";
 
                   extraConfig = ''

homelab-services/nimh-static/k3s/deployment.yaml

@@ -25,7 +25,15 @@ spec:
             - name: static-files
               mountPath: /var/nimh-static/site
               readOnly: true
+
+            - name: nginx-config
+              mountPath: /etc/nginx/conf.d/default.conf
+              subPath: default.conf
       volumes:
         - name: static-files
           configMap:
             name: nimh-static-files
+
+        - name: nginx-config
+          configMap:
+            name: nimh-static-nginx

homelab-services/nimh-static/k3s/kustomization.yaml

@@ -4,3 +4,4 @@ resources:
   - configmap.yaml
   - deployment.yaml
   - service.yaml
+  - nginx.yaml

homelab-services/nimh-static/k3s/nginx.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nimh-static-nginx
+
+data:
+  default.conf: |
+    server {
+      listen 80;
+
+      root /var/nimh-static/site;
+      index index.html;
+
+      location / {
+        try_files $uri $uri/ =404;
+      }
+    }

nixos/configuration.nix

@@ -1,6 +1,5 @@
 {
   config,
-  lib,
   pkgs,
   meta,
   ...
@@ -42,12 +41,6 @@
         group = "acme";
       };
 
-      "minio-credentials" = {
-        sopsFile = ./secrets/minio.yaml;
-        key = "minioCredentials";
-        format = "yaml";
-      };
-
       "postgresql-credentials" = {
         sopsFile = ./secrets/psql.yaml;
         key = "credentials";
@@ -78,6 +71,7 @@
         CF_API_KEY_FILE = config.sops.secrets."cloudflare-api-key".path;
       };
     };
+
     certs = {
       "roypository.com" = {
         domain = "*.roypository.com";