feat: caddy test

This commit is contained in:
Nick 2024-12-20 01:18:28 -06:00
parent 38b1a6a95e
commit 12e63f8108

View file

@ -1,9 +1,7 @@
{flake, ...}: let
inherit (flake.config.machines.devices) server;
inherit (flake.config.people.users) user0;
inherit (flake.config.services.instances) upRootNutrition web;
service = upRootNutrition;
localhost = web.localhost.address0;
# localhost = web.localhost.address0;
host = web.domains.url3;
in {
services = {
@ -11,23 +9,14 @@ in {
virtualHosts = {
"${host}" = {
extraConfig = ''
root * /var/lib/website/dist
try_files {path} /index.html
# Root directory where your compiled Elm files are located
root * ${service.path.path0}
file_server
# Optional: Add security headers
header {
Strict-Transport-Security "max-age=31536000;"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "strict-origin-when-cross-origin"
}
encode gzip
# Your existing redirects
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port0}
try_files {path} /index.html
tls ${service.ssl.cert} ${service.ssl.key}
'';
@ -35,4 +24,7 @@ in {
};
};
};
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 755 caddy caddy -"
];
}