test: setting up nas structure

modules/nixos/homelab/caddy/config/mastodon/default.nix

@@ -0,0 +1,31 @@
+{ flake, config, ... }:
+let
+  inherit (flake.config.services) instances;
+  serviceCfg = instances.mastodon;
+  interface0Cfg = serviceCfg.interfaces.interface0;
+  host0 = interface0Cfg.domain;
+  dns0 = instances.web.dns.provider0;
+  dns0Path = "dns/${dns0}";
+in
+{
+  security.acme.certs."${host0}" = {
+    dnsProvider = dns0;
+    environmentFile = config.sops.secrets.${dns0Path}.path;
+    group = "caddy";
+  };
+
+  services.caddy.virtualHosts."${host0}" = {
+    extraConfig = ''
+      reverse_proxy http://${interface0Cfg.microvm.ip}:80 {
+        header_up X-Forwarded-Proto {scheme}
+        header_up X-Real-IP {remote_host}
+        header_up X-Forwarded-For {remote_host}
+      }
+
+      tls ${interface0Cfg.ssl.cert} ${interface0Cfg.ssl.key}
+
+      encode zstd gzip
+    '';
+  };
+
+}