infrastructure

commit 830fd286eb55c31006b84ea45f0cfd1cda126a4a
parent e87b4629c80bb1338f35b24e21f05d0b89990038
Author: Silas Brack <silasbrack@gmail.com>
Date:   Sat, 13 Jun 2026 13:53:09 +0200

feat: serve logs via nginx on VPN (10.100.0.1:8080)

Logs accessible at http://10.100.0.1:8080/ from the WireGuard
network. Queryable with duckdb:

  SELECT * FROM read_json('http://10.100.0.1:8080/2026/06/**/*.json.gz')

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Diffstat:
M
modules/simple-web-app.nix
 | 
9
+++++++++

1 file changed, 9 insertions(+), 0 deletions(-)
diff --git a/modules/simple-web-app.nix b/modules/simple-web-app.nix
@@ -65,6 +65,15 @@ in
       };
     };
 
+    # Serve logs on VPN only
+    services.nginx.virtualHosts."simple-web-app-logs" = {
+      listen = [{ addr = "10.100.0.1"; port = 8080; }];
+      locations."/" = {
+        root = "/mnt/volume-hel1-1/simple-web-app/logs";
+        extraConfig = "autoindex on;";
+      };
+    };
+
     # Archive logs to volume
     systemd.services.simple-web-app-log-collection = {
       script = ''