commit 39e4f19b4004f815aaea51a73f8f5b7dbe5b71da · sapphic.moe/flake

+15 -13

secrets/caddy.age

···

       1
       1
        
       -----BEGIN AGE ENCRYPTED FILE-----

     

       2
       2
       -
       YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSA3OTRw

     

       3
       3
       -
       N0pLbkIxZ2lvVEkyb0o4RGdZVVEzQ0VtSlp5MVJPMWNPd0xoc0JrCmRRMWR5N2hs

     

       4
       4
       -
       dFRwUVQ3RCtIb2hKT2ZvVlU4UUFBM0dkWmZ0U0lCUERZMUEKLT4gc3NoLWVkMjU1

     

       5
       5
       -
       MTkgMUNUOTd3IERweUM3ekJqTXBNTVYxU3p1OVhwZGxGdDl5bGNLRHBzbW12OHdN

     

       6
       6
       -
       NlpMRmsKendPWjFTZFFmMnpSWWNsa0NDM2kvTTNKYk42M01uS1BpazJzSGErUnE5

     

       7
       7
       -
       MAotPiBzc2gtZWQyNTUxOSBlUDNUdFEgb3prY01iWjBlS1pLSnZnTFJsOXM1NkVL

     

       8
       8
       -
       S3hJZTJ5V21lNFBDN21RTFN5VQpCa1lVNStyVWl5TS9Lcm9ZZHArV3ExWmViVzNv

     

       9
       9
       -
       cm9zNUdzN2ZjcVFkTjFrCi0+IDF3VVg2LWdyZWFzZSAvLUNTTzp0NSAyRUFrdSBp

     

       10
       10
       -
       UH0xIEgKWDJxU2tkQ20wZ29aQzlEWlh4RTQzaHBFV0tUb1hNUVg3aENOT0NxY0Z4

     

       11
       11
       -
       eEtpd3Nwb3BBYmU0a0JKZFBFOXFJYgpKMVNPcTIxNnhUelRmNmFqVGNsQVV6NTRO

     

       12
       12
       -
       d2cKLS0tIDYrQ2tWRWhHcTFGUnVNRU9kaWJCRkRSTXB5YTJvVnpwZ2ttLzhubGg1

     

       13
       13
       -
       N2sKd+UAtI0xQxss7MdlaHSRhAK6sOhBJ84PmnjDYDBhf4Xg2ON/EmD5AmUfcmcD

     

       14
       14
       -
       yEfwQSp1/vvUCtW1CXzEUswCRUzzhufms8GSLC7ehRAbhImhIK0lCKU=

     

       2
       2
       +
       YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSBlbTVy

     

       3
       3
       +
       ZWNtK3dCVUEzbEhBVCtkczN6YmpENm43U0xWYkhIcnlDZ3dBQlJvClJZa09vejBI

     

       4
       4
       +
       aWRMVms5L0dtNnlZUTRJNnYwS05VcWxKUUNjNllnSHU2N2MKLT4gc3NoLWVkMjU1

     

       5
       5
       +
       MTkgMUNUOTd3IFRwenhOSytFd3J4N25UNVFCWXkxa2NvdEVkcmNVSjBKMG5TMjBL

     

       6
       6
       +
       UXJRRDAKelJpa0VrL0JKODkzZE5sZnRHeFp2eDdJYXB4WDFwSmQ2UHUvT2FzMldB

     

       7
       7
       +
       awotPiBzc2gtZWQyNTUxOSBlUDNUdFEgak5vdU9wbU95YWpoSS9uZ2tkakdOWXpq

     

       8
       8
       +
       VFQ3VWZqdG56RzlNcGEwY0R6VQpySE93VVBrUUl2aTdnVHNrSzZrS3N6RVkyTWlr

     

       9
       9
       +
       dkVYUVpQNEJlN2NFSWs0Ci0+IEd0Qy9ZLWdyZWFzZSBPUWtiICU8ICMKQVhZbjBn

     

       10
       10
       +
       OUg0UURvTnlDaVZIdVpNL0xCTXkzekxkTWQ0TWpsTk1ML2RGaStwems2elh6UFBz

     

       11
       11
       +
       aXE4Z21OTHkrMgpjWGc2UGlUekdXbXkKLS0tIE1rN0RUVTk5YTJ2M2lQL2VPdDJU

     

       12
       12
       +
       b2dDMWRZTG1pSHlXL1UrQnVKKzRmQUEKhi9xf1bwwoPn8pR2K4Dr1pXNFJ3GUZKw

     

       13
       13
       +
       RWqxUk1cBXNpjHBcXDRmsd+EhJj4jHBKu3HKdkwNMFKkMYM19fmZ8BTX/ICgIc1K

     

       14
       14
       +
       9RkLAYlMtx9EjrtEmTWnaV1rJc9iVnply/qamN+XIQi8xtgLdrcCHB5j/lZpTuej

     

       15
       15
       +
       pub2QU8uBlCvAvS4SZm06l8e7ajI5HJOeXlFSBFbcx9I1szozHnuJkaTJO2kzhj0

     

       16
       16
       +
       6fER0DSV1g==

     

       15
       17
        
       -----END AGE ENCRYPTED FILE-----

+1 -1

services/bluesky-pds/default.nix

···

       28
       28
        
           serverAliases = [ "*.pds.sappho.systems" ];

     

       29
       29
        
           extraConfig = ''

     

       30
       30
        
             import common

     

       31
       31
       -
             import tls_cloudflare

     

       31
       31
       +
             import tls_bunny

     

       32
       32
        
       

     

       33
       33
        
             handle / {

     

       34
       34
        
               respond <<EOF

+3 -3

services/caddy/default.nix

···

       9
       9
        
         services.caddy = {

     

       10
       10
        
           enable = true;

     

       11
       11
        
           package = pkgs.caddy.withPlugins {

     

       12
       12
       -
             plugins = [ "github.com/caddy-dns/cloudflare@v0.2.1" ];

     

       12
       12
       +
             plugins = [ "github.com/caddy-dns/bunny@v1.2.0" ];

     

       13
       13
        
             hash = "sha256-iRzpN9awuEFsc7hqKzOMNiCFFEv833xhd4LM+VFQedI=";

     

       14
       14
        
           };

     

       15
       15
        
           environmentFile = config.age.secrets.caddy.path;

     
···

       17
       17
        
             email chloe@sapphic.moe

     

       18
       18
        
           '';

     

       19
       19
        
           extraConfig = ''

     

       20
       20
       -
             (tls_cloudflare) {

     

       20
       20
       +
             (tls_bunny) {

     

       21
       21
        
               tls {

     

       22
       22
       -
                 dns cloudflare {env.CF_API_TOKEN}

     

       22
       22
       +
                 dns bunny {env.BUNNY_API_TOKEN}

     

       23
       23
        
                 resolvers 8.8.8.8 1.1.1.1

     

       24
       24
        
               }

     

       25
       25
        
             }

+1 -1

services/destiny-labeler/default.nix

···

       41
       41
        
         services.caddy.virtualHosts."labeler.sappho.systems" = {

     

       42
       42
        
           extraConfig = ''

     

       43
       43
        
             import common

     

       44
       44
       -
             import tls_cloudflare

     

       44
       44
       +
             import tls_bunny

     

       45
       45
        
             reverse_proxy http://127.0.0.1:4002

     

       46
       46
        
           '';

     

       47
       47
        
         };

+1 -1

services/glance/default.nix

···

       16
       16
        
         services.caddy.virtualHosts."home.sappho.systems" = {

     

       17
       17
        
           extraConfig = ''

     

       18
       18
        
             import common

     

       19
       19
       -
             import tls_cloudflare

     

       19
       19
       +
             import tls_bunny

     

       20
       20
        
             reverse_proxy http://localhost:4040

     

       21
       21
        
           '';

     

       22
       22
        
         };

+1 -1

services/knot/default.nix

···

       15
       15
        
         services.caddy.virtualHosts."knot.sappho.systems" = {

     

       16
       16
        
           extraConfig = ''

     

       17
       17
        
             import common

     

       18
       18
       -
             import tls_cloudflare

     

       18
       18
       +
             import tls_bunny

     

       19
       19
        
             reverse_proxy http://127.0.0.1:5555

     

       20
       20
        
           '';

     

       21
       21
        
         };

+1 -1

services/lanyard/default.nix

···

       29
       29
        
         services.caddy.virtualHosts."lanyard.sappho.systems" = {

     

       30
       30
        
           extraConfig = ''

     

       31
       31
        
             import common

     

       32
       32
       -
             import tls_cloudflare

     

       32
       32
       +
             import tls_bunny

     

       33
       33
        
             reverse_proxy http://127.0.0.1:4001

     

       34
       34
        
           '';

     

       35
       35
        
         };

+1 -1

services/ntfy/default.nix

···

       33
       33
        
         services.caddy.virtualHosts."notify.sappho.systems" = {

     

       34
       34
        
           extraConfig = ''

     

       35
       35
        
             import common

     

       36
       36
       -
             import tls_cloudflare

     

       36
       36
       +
             import tls_bunny

     

       37
       37
        
             reverse_proxy http://127.0.0.1:7070

     

       38
       38
        
           '';

     

       39
       39
        
         };

+2 -2

services/outline/default.nix

···

       108
       108
        
         services.caddy.virtualHosts."wiki.sappho.systems" = {

     

       109
       109
        
           extraConfig = ''

     

       110
       110
        
             import common

     

       111
       111
       -
             import tls_cloudflare

     

       111
       111
       +
             import tls_bunny

     

       112
       112
        
             reverse_proxy http://localhost:3300

     

       113
       113
        
           '';

     

       114
       114
        
         };

     
···

       116
       116
        
         services.caddy.virtualHosts."minio.sappho.systems" = {

     

       117
       117
        
           extraConfig = ''

     

       118
       118
        
             import common

     

       119
       119
       -
             import tls_cloudflare

     

       119
       119
       +
             import tls_bunny

     

       120
       120
        
             reverse_proxy http://localhost:9000

     

       121
       121
        
           '';

     

       122
       122
        
         };