commit 588c4d583671f45977a125cbf2d2ef872d2ab419 · pyrox.dev/nix

+37 -11

systems/x86_64-linux/prefect/services/caddy.nix

···

       15
        
           enable = true;

     

       16
        
           package = pkgs.caddy.withPlugins {

     

       17
        
             plugins = [

     

       18
       -
               "github.com/caddy-dns/desec@v0.0.0-20240526070323-822a6a2014b2"

     

       19
        
               "github.com/greenpau/caddy-security@v1.1.31"

     

       20
        
               "github.com/tailscale/caddy-tailscale@v0.0.0-20250207163903-69a970c84556"

     

       21
        
             ];

     

       22
       -
             hash = "sha256-rvPZ/Lomx40tvlqqhUBIG9wCHJorN2FGus7gtO7ob/0=";

     

       23
        
           };

     

       24
        
           email = "pyrox@pyrox.dev";

     

       25
        
           virtualHosts = {

     
···

       68
        
             };

     

       69
        
       

     

       70
        
             # Authentik

     

       71
       -
             "${pns.authentik.extUrl}:443" = reverseProxyToMarvin pns.authentik.port false;

     

       72
       -
             "${pns.authentik.extUrl}:80" = reverseProxyToMarvin pns.authentik.port false;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       73
        
             "http://${pns.authentik.extUrl}:389" = reverseProxyToMarvin 389 false;

     

       74
        
             "${pns.authentik.extUrl}:636" = reverseProxyToMarvin 636 false;

     

       75
        
       

     
···

       86
        
                   -X-Powered-By

     

       87
        
                   -Last-Modified

     

       88
        
                 }

     

       89
       -
                 reverse_proxy ${marvin}:${toString pns.vaultwarden.port} {

     

       90
        
                   header_up X-Real-IP {remote_host}

     

       0
        
       
     

       91
        
                 }

     

       92
        
               '';

     

       93
        
             };

     
···

       169
        
             # Forgejo

     

       170
        
             ${pns.git.extUrl} = {

     

       171
        
               extraConfig = ''

     

       172
       -
                 reverse_proxy http://${marvin}:${toString pns.git.port}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       173
        
               '';

     

       174
        
             };

     

       175
        
       

     

       176
        
             # Grafana

     

       177
        
             ${pns.grafana.extUrl} = {

     

       178
        
               extraConfig = ''

     

       179
       -
                 reverse_proxy http://${marvin}:${toString pns.grafana.port}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       180
        
               '';

     

       181
        
             };

     

       182
        
       

     

       183
        
             # Miniflux

     

       184
        
             ${pns.miniflux.extUrl} = {

     

       185
        
               extraConfig = ''

     

       186
       -
                 reverse_proxy http://${marvin}:${toString pns.miniflux.port}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       187
        
               '';

     

       188
        
             };

     

       189
        
       

     

       190
        
             # Nextcloud

     

       191
        
             ${pns.nextcloud.extUrl} = {

     

       192
        
               extraConfig = ''

     

       193
       -
                 reverse_proxy http://${marvin}:${toString pns.nextcloud.port}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       194
        
               '';

     

       195
        
             };

     

       196
        
       

     

       197
        
             # Nextcloud-Office(Collabora)

     

       198
        
             ${pns.nextcloud-office.extUrl} = {

     

       199
        
               extraConfig = ''

     

       200
       -
                 reverse_proxy http://${marvin}:${toString pns.nextcloud-office.port}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       201
        
               '';

     

       202
        
             };

     

       203
        
       

     

       204
        
             # Planka

     

       205
        
             ${pns.planka.extUrl} = {

     

       206
        
               extraConfig = ''

     

       207
       -
                 reverse_proxy http://${marvin}:${toString pns.planka.port}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       208
        
               '';

     

       209
        
             };

     

       210

···

       15
        
           enable = true;

     

       16
        
           package = pkgs.caddy.withPlugins {

     

       17
        
             plugins = [

     

       18
       +
               "github.com/caddy-dns/desec@v1.0.1"

     

       19
        
               "github.com/greenpau/caddy-security@v1.1.31"

     

       20
        
               "github.com/tailscale/caddy-tailscale@v0.0.0-20250207163903-69a970c84556"

     

       21
        
             ];

     

       22
       +
             hash = "sha256-lsceZXoTPJCDjl84OQTZUTBRuVAxo8KMWjTXzCFwA6U=";

     

       23
        
           };

     

       24
        
           email = "pyrox@pyrox.dev";

     

       25
        
           virtualHosts = {

     
···

       68
        
             };

     

       69
        
       

     

       70
        
             # Authentik

     

       71
       +
             "${pns.authentik.extUrl}:443" = {

     

       72
       +
               serverAliases = [ "${pns.authentik.extUrl}:80" ];

     

       73
       +
               extraConfig = ''

     

       74
       +
                   reverse_proxy http://${marvin}:${toString pns.authentik.anubis} {

     

       75
       +
                 		header_up X-Real-Ip {remote_host}

     

       76
       +
                     header_up X-Http-Version {http.request.proto}

     

       77
       +
                   }

     

       78
       +
               '';

     

       79
       +
             };

     

       80
        
             "http://${pns.authentik.extUrl}:389" = reverseProxyToMarvin 389 false;

     

       81
        
             "${pns.authentik.extUrl}:636" = reverseProxyToMarvin 636 false;

     

       82
        
       

     
···

       93
        
                   -X-Powered-By

     

       94
        
                   -Last-Modified

     

       95
        
                 }

     

       96
       +
                 reverse_proxy ${marvin}:${toString pns.vaultwarden.anubis} {

     

       97
        
                   header_up X-Real-IP {remote_host}

     

       98
       +
                   header_up X-Http-Version {http.request.proto}

     

       99
        
                 }

     

       100
        
               '';

     

       101
        
             };

     
···

       177
        
             # Forgejo

     

       178
        
             ${pns.git.extUrl} = {

     

       179
        
               extraConfig = ''

     

       180
       +
                 reverse_proxy http://${marvin}:${toString pns.git.anubis} {

     

       181
       +
                   header_up X-Real-Ip {remote_host}

     

       182
       +
                   header_up X-Http-Version {http.request.proto}

     

       183
       +
                 }

     

       184
        
               '';

     

       185
        
             };

     

       186
        
       

     

       187
        
             # Grafana

     

       188
        
             ${pns.grafana.extUrl} = {

     

       189
        
               extraConfig = ''

     

       190
       +
                 reverse_proxy http://${marvin}:${toString pns.grafana.anubis} {

     

       191
       +
                   header_up X-Real-Ip {remote_host}

     

       192
       +
                   header_up X-Http-Version {http.request.proto}

     

       193
       +
                 }

     

       194
        
               '';

     

       195
        
             };

     

       196
        
       

     

       197
        
             # Miniflux

     

       198
        
             ${pns.miniflux.extUrl} = {

     

       199
        
               extraConfig = ''

     

       200
       +
                 reverse_proxy http://${marvin}:${toString pns.miniflux.anubis} {

     

       201
       +
                   header_up X-Real-Ip {remote_host}

     

       202
       +
                   header_up X-Http-Version {http.request.proto}

     

       203
       +
                 }

     

       204
        
               '';

     

       205
        
             };

     

       206
        
       

     

       207
        
             # Nextcloud

     

       208
        
             ${pns.nextcloud.extUrl} = {

     

       209
        
               extraConfig = ''

     

       210
       +
                 reverse_proxy http://${marvin}:${toString pns.nextcloud.anubis} {

     

       211
       +
                   header_up X-Real-Ip {remote_host}

     

       212
       +
                   header_up X-Http-Version {http.request.proto}

     

       213
       +
                 }

     

       214
        
               '';

     

       215
        
             };

     

       216
        
       

     

       217
        
             # Nextcloud-Office(Collabora)

     

       218
        
             ${pns.nextcloud-office.extUrl} = {

     

       219
        
               extraConfig = ''

     

       220
       +
                 reverse_proxy http://${marvin}:${toString pns.nextcloud-office.anubis} {

     

       221
       +
                   header_up X-Real-Ip {remote_host}

     

       222
       +
                   header_up X-Http-Version {http.request.proto}

     

       223
       +
                 }

     

       224
        
               '';

     

       225
        
             };

     

       226
        
       

     

       227
        
             # Planka

     

       228
        
             ${pns.planka.extUrl} = {

     

       229
        
               extraConfig = ''

     

       230
       +
                 reverse_proxy http://${marvin}:${toString pns.planka.anubis} {

     

       231
       +
                   header_up X-Real-Ip {remote_host}

     

       232
       +
                   header_up X-Http-Version {http.request.proto}

     

       233
       +
                 }

     

       234
        
               '';

     

       235
        
             };

     

       236