From bf3c4fca2d52804921831018c47772a24ecc83f0 Mon Sep 17 00:00:00 2001
From: Nathan McCarty <nathan@mccarty.io>
Date: Mon, 3 Oct 2022 03:27:52 -0400
Subject: [PATCH] Tweak nginx

---
 machines/tounge/configuration.nix | 25 +++++++------------------
 1 file changed, 7 insertions(+), 18 deletions(-)

diff --git a/machines/tounge/configuration.nix b/machines/tounge/configuration.nix
index 0f559ea..a0183f6 100644
--- a/machines/tounge/configuration.nix
+++ b/machines/tounge/configuration.nix
@@ -112,18 +112,7 @@
         locations."/" = {
           proxyPass = "http://localhost:3080";
           extraConfig = ''
-            allow 172.23.0.0/16;
-            deny all;
-          '';
-        };
-      };
-      "hub.mccarty.io" = {
-        forceSSL = true;
-        useACMEHost = "mccarty.io";
-        locations."/" = {
-          proxyPass = "http://localhost:3081";
-          extraConfig = ''
-            allow 172.23.0.0/16;
+            allow 100.64.0.0/10;
             deny all;
           '';
         };
@@ -132,9 +121,9 @@
         forceSSL = true;
         useACMEHost = "mccarty.io";
         locations."/" = {
-          proxyPass = "http://10.0.3.10:8989";
+          proxyPass = "http://100.67.146.101:8989";
           extraConfig = ''
-            allow 172.23.0.0/16;
+            allow 100.64.0.0/10;
             deny all;
           '';
         };
@@ -143,9 +132,9 @@
         forceSSL = true;
         useACMEHost = "mccarty.io";
         locations."/" = {
-          proxyPass = "http://10.0.3.10:7878";
+          proxyPass = "http://100.67.146.101:7878";
           extraConfig = ''
-            allow 172.23.0.0/16;
+            allow 100.64.0.0/10;
             deny all;
           '';
         };
@@ -154,9 +143,9 @@
         forceSSL = true;
         useACMEHost = "mccarty.io";
         locations."/" = {
-          proxyPass = "http://10.0.3.10:8080";
+          proxyPass = "http://100.67.146.101:8080";
           extraConfig = ''
-            allow 172.23.0.0/16;
+            allow 100.64.0.0/10;
             deny all;
           '';
         };