Disabled https

This commit is contained in:
Jan-Bulthuis 2025-05-28 19:26:11 +02:00
parent 36c2c907d5
commit 13fbcea361

View File

@ -20,39 +20,19 @@
# Setup wstunnel server # Setup wstunnel server
services.wstunnel = { services.wstunnel = {
enable = true; enable = true;
servers.wg-tunnel = servers.wg-tunnel = {
let enableHTTPS = false;
tlsFiles = pkgs.stdenvNoCC.mkDerivation { listen = {
name = "tls-files"; host = "0.0.0.0";
phases = [ port = 8080;
"buildPhase"
"installPhase"
];
buildPhase = ''
${pkgs.openssl}/bin/openssl genrsa > privkey.pem
${pkgs.openssl}/bin/openssl req -new -x509 -batch -key privkey.pem > fullchain.pem
'';
installPhase = ''
mkdir -p $out
cp privkey.pem fullchain.pem $out/
'';
};
in
{
enableHTTPS = true;
listen = {
host = "0.0.0.0";
port = 8080;
};
restrictTo = [
{
host = "10.10.40.100";
port = 51820;
}
];
tlsCertificate = "${tlsFiles}/fullchain.pem";
tlsKey = "${tlsFiles}/privkey.pem";
}; };
restrictTo = [
{
host = "10.10.40.100";
port = 51820;
}
];
};
}; };
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 8080 ]; allowedTCPPorts = [ 8080 ];