Replace problematic aliases with redirects
Ordinarily an alias is alright, however some sites (for example
vaultwarden which authenticates with security keys, or nextcloud where
share links may end up leading to different sites) should be
standardized to a single canonical domain.
The statement "an alias is alright" is not intended to imply that a
redirect cannot be preferred in other cases, we're only removing bad
aliases here rather than taking a stance on aliases as a whole.
Change-Id: I9d51acffccd14a6142313925d3029a48b2698abf
Reviewed-on: https://git.clicks.codes/c/Infra/NixFiles/+/537
Reviewed-by: Samuel Shuert <coded@clicks.codes>
Tested-by: Skyler Grey <minion@clicks.codes>
diff --git a/modules/common/nginx-routes.nix b/modules/common/nginx-routes.nix
index eb3b4d3..db69c1f 100644
--- a/modules/common/nginx-routes.nix
+++ b/modules/common/nginx-routes.nix
@@ -11,7 +11,12 @@
(ReverseProxy "127.0.0.1:3000")
]))
(Hosts [ "resume.coded.codes" "resume.thecoded.prof" ] (ReverseProxy "coded:1024"))
- (Hosts [ "vaultwarden.clicks.codes" "passwords.clicks.codes" ] (ReverseProxy "generic:1028"))
+ (Hosts [ "vaultwarden.clicks.codes" ] (ReverseProxy "generic:1028"))
+ (Hosts [ "passwords.clicks.codes" ] (RedirectPermanent "https://vaultwarden.clicks.codes"))
+ (Hosts [
+ "cloud.clicks.codes"
+ "www.cloud.clicks.codes"
+ ] (RedirectPermanent "https://nextcloud.clicks.codes"))
(Hosts [
"erpnext.clicks.codes"
"projects.clicks.codes"
@@ -101,8 +106,6 @@
];
clicks.nginx.serviceAliases = with helpers.nginx; [
(Aliases "nextcloud.clicks.codes" [
- "cloud.clicks.codes"
- "www.cloud.clicks.codes"
"www.nextcloud.clicks.codes"
])
(Aliases "privatebin" [