cockpit

Server management web console via Cockpit.

The service runs directly on the host as a system service. Unencrypted HTTP is permitted so the reverse proxy can terminate TLS. The blueprint does not configure Origins or socket binding; consumers in non-default network topologies should override services.cockpit.settings.WebService accordingly.

Consumer should override: Origins URL and socket binding when the service is exposed through a non-standard hostname or proxy path.

nixda.zones.management.services.cockpit = lib.recursiveUpdate
  config.nixda.catalog.cockpit
  {
    id = 15;
    runtime.system.configuration = { lib, ... }: {
      services.cockpit.settings.WebService.Origins = lib.mkForce
        "https://cockpit.example.internal";
    };
  };

Back to Blueprint Catalog