❄️ Dotfiles for our NixOS system configuration.
sapphic.moe
1{ config, ... }:
2
3{
4 services.redis.servers."lanyard" = {
5 enable = true;
6 port = 6379;
7 bind = "127.0.0.1";
8 };
9
10 age.secrets.lanyard = {
11 file = ../../secrets/lanyard.age;
12 mode = "600";
13 };
14
15 virtualisation.oci-containers.containers.lanyard = {
16 image = "phineas/lanyard:latest";
17 ports = [ "4001:4001" ];
18 environment = {
19 REDIS_HOST = "127.0.0.1";
20 };
21 environmentFiles = [ config.age.secrets.lanyard.path ];
22 autoRemoveOnStop = false;
23 extraOptions = [
24 "--restart=always"
25 "--network=host"
26 ];
27 };
28
29 services.caddy.virtualHosts."lanyard.sappho.systems" = {
30 extraConfig = ''
31 import common
32 import tls_cloudflare
33 reverse_proxy http://127.0.0.1:4001
34 '';
35 };
36}