diff --git a/services/nginx.nix b/services/nginx.nix index d22afa6..9bd78c7 100644 --- a/services/nginx.nix +++ b/services/nginx.nix @@ -113,7 +113,7 @@ in # through the file manager are whole server archives, hence no # body-size cap; the console websocket idles between keystrokes, hence # the long read timeout. - "node.nordhammer.it" = lib.recursiveUpdate (proxy 8443) { + "games.nordhammer.it" = lib.recursiveUpdate (proxy 8443) { locations."/".extraConfig = '' client_max_body_size 0; proxy_read_timeout 7d; diff --git a/services/pelican.nix b/services/pelican.nix index da4eaae..9aff93a 100644 --- a/services/pelican.nix +++ b/services/pelican.nix @@ -30,8 +30,12 @@ # # FIRST-RUN (wings crash-loops until step 3 — that's expected): # 1. Admin user: docker exec -it -u 82 pelican-panel php artisan p:user:make -# 2. Admin → Nodes → Create. FQDN node.nordhammer.it, SSL *on*, port 443 -# (nginx terminates TLS and proxies to wings' plain :8080 below). +# 2. Admin → Nodes → Create. FQDN games.nordhammer.it, SSL *on*, and +# "Behind Proxy" *on* — that last one is what makes the generated config +# say api.ssl.enabled: false, so wings serves plain HTTP and nginx owns +# the cert. The two daemon ports are not the same number: Listen stays +# 8080 (what wings binds inside the container) while Connect is 443 (what +# the panel and browsers dial, i.e. nginx). # Allocations: IP 10.0.0.1, ports 25565-25600 (matches ports.toml). # 3. Node → Configuration tab → copy the generated YAML to # /etc/pelican/config.yml on this host, then @@ -100,7 +104,7 @@ "/etc/ssl/certs:/etc/ssl/certs:ro" ]; ports = [ - # Daemon API + console websocket — nginx fronts it as node.nordhammer.it. + # Daemon API + console websocket — nginx fronts it as games.nordhammer.it. "127.0.0.1:8443:8080" # SFTP into server files. LAN-reachable; not in ports.toml, so no WAN. "2022:2022"