mirror of
https://gitlab.com/upRootNutrition/dotfiles.git
synced 2025-12-13 18:10:54 -06:00
35 lines
743 B
Nix
35 lines
743 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
flake,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
let
|
||
|
|
inherit (flake.config.services) instances;
|
||
|
|
serviceCfg = instances.vaultwarden;
|
||
|
|
interfaceCfg = serviceCfg.interfaces.interface0;
|
||
|
|
dns0 = instances.web.dns.provider0;
|
||
|
|
host = interfaceCfg.domain;
|
||
|
|
dns0Path = "dns/${dns0}";
|
||
|
|
in
|
||
|
|
{
|
||
|
|
security.acme.certs."${host}" = {
|
||
|
|
dnsProvider = dns0;
|
||
|
|
environmentFile = config.sops.secrets.${dns0Path}.path;
|
||
|
|
group = "caddy";
|
||
|
|
};
|
||
|
|
|
||
|
|
services.caddy.virtualHosts = {
|
||
|
|
"${host}" = {
|
||
|
|
extraConfig = ''
|
||
|
|
reverse_proxy ${interfaceCfg.microvm.ip}:${toString serviceCfg.ports.port0} {
|
||
|
|
header_up X-Real-IP {remote_host}
|
||
|
|
}
|
||
|
|
|
||
|
|
tls ${interfaceCfg.ssl.cert} ${interfaceCfg.ssl.key}
|
||
|
|
|
||
|
|
encode zstd gzip
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|