···

       
9
       
 
       
  services.caddy = {

     

       
10
       
 
       
    enable = true;

     

       
11
       
 
       
    package = pkgs.caddy.withPlugins {

     

       
12
       
-
       
      plugins = [ "github.com/caddy-dns/bunny@v1.2.0" ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
13
       
 
       
      hash = "sha256-bwffi5sWq07DVoPQGgEIN1jnvQKL6c4tFfR9AT9ThD4=";

     

       
14
       
 
       
    };

     

       
15
       
 
       
    environmentFile = config.age.secrets.caddy.path;

     

       
16
       
 
       
    globalConfig = ''

     

       
17
       
 
       
      email chloe@sapphic.moe

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
18
       
 
       
    '';

     

       
19
       
 
       
    extraConfig = ''

     

       
20
       
 
       
      (tls_bunny) {

     
···

       
23
       
 
       
          resolvers 9.9.9.9 149.112.112.112

     

       
24
       
 
       
        }

     

       
25
       
 
       
      }

     

       
0
       
 
       

     

       
26
       
 
       
      (common) {

     

       
27
       
 
       
        encode zstd gzip

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
28
       
 
       
      }

     

       
29
       
 
       
    '';

     

       
30
       
 
       
    logFormat = ''

     

···

       
9
       
 
       
  services.caddy = {

     

       
10
       
 
       
    enable = true;

     

       
11
       
 
       
    package = pkgs.caddy.withPlugins {

     

       
12
       
+
       
      plugins = [

     

       
13
       
+
       
        "github.com/caddy-dns/bunny@v1.2.0"

     

       
14
       
+
       
        "github.com/digilolnet/caddy-bunny-ip@v0.0.0-20250118080727-ef607b8e1644"

     

       
15
       
+
       
      ];

     

       
16
       
 
       
      hash = "sha256-bwffi5sWq07DVoPQGgEIN1jnvQKL6c4tFfR9AT9ThD4=";

     

       
17
       
 
       
    };

     

       
18
       
 
       
    environmentFile = config.age.secrets.caddy.path;

     

       
19
       
 
       
    globalConfig = ''

     

       
20
       
 
       
      email chloe@sapphic.moe

     

       
21
       
+
       
      servers {

     

       
22
       
+
       
        trusted_proxies bunny {

     

       
23
       
+
       
          interval 6h

     

       
24
       
+
       
          timeout 25s

     

       
25
       
+
       
        }

     

       
26
       
+
       
      }

     

       
27
       
 
       
    '';

     

       
28
       
 
       
    extraConfig = ''

     

       
29
       
 
       
      (tls_bunny) {

     
···

       
32
       
 
       
          resolvers 9.9.9.9 149.112.112.112

     

       
33
       
 
       
        }

     

       
34
       
 
       
      }

     

       
35
       
+
       


     

       
36
       
 
       
      (common) {

     

       
37
       
 
       
        encode zstd gzip

     

       
38
       
+
       
      }

     

       
39
       
+
       


     

       
40
       
+
       
      (deny_non_bunny) {

     

       
41
       
+
       
        @not_bunny not client_ip 127.0.0.1 ::1

     

       
42
       
+
       
        handle @not_bunny {

     

       
43
       
+
       
          abort

     

       
44
       
+
       
        }

     

       
45
       
 
       
      }

     

       
46
       
 
       
    '';

     

       
47
       
 
       
    logFormat = ''

     

···

       
33
       
 
       
  services.caddy.virtualHosts."notify.sappho.systems" = {

     

       
34
       
 
       
    extraConfig = ''

     

       
35
       
 
       
      import common

     

       
0
       
 
       

     

       
0
       
 
       

     

       
36
       
 
       


     

       
37
       
 
       
      reverse_proxy http://127.0.0.1:7070 {

     

       
38
       
 
       
        header_up X-Forwarded-Proto https

     

···

       
33
       
 
       
  services.caddy.virtualHosts."notify.sappho.systems" = {

     

       
34
       
 
       
    extraConfig = ''

     

       
35
       
 
       
      import common

     

       
36
       
+
       
      import tls_bunny

     

       
37
       
+
       
      import deny_non_bunny

     

       
38
       
 
       


     

       
39
       
 
       
      reverse_proxy http://127.0.0.1:7070 {

     

       
40
       
 
       
        header_up X-Forwarded-Proto https