feat: caddy test

This commit is contained in:
Nick 2024-12-19 22:37:17 -06:00
parent 8b359bfb9f
commit 639a0a24e5
3 changed files with 9 additions and 22 deletions

View file

@ -17,6 +17,9 @@ in {
path1 = "";
path2 = "";
};
ports = {
port0 = 1234;
};
ssl = {
cert = "${sslPath}/${domain3}/fullchain.pem";
key = "${sslPath}/${domain3}/key.pem";

View file

@ -8,7 +8,7 @@
inherit (flake.config.machines.devices) server;
inherit (flake.config.services.instances) mastodon web;
service = mastodon;
host = web.domains.url1;
host = web.domains.url3;
localhost = web.localhost.address0;
in {
# If you need to start fresh for some reason, run these to create the new Admin account:

View file

@ -1,9 +1,4 @@
{
flake,
config,
...
}: let
inherit (flake.config.machines.devices) server;
{flake, ...}: let
inherit (flake.config.services.instances) upRootNutrition web;
service = upRootNutrition;
localhost = web.localhost.address0;
@ -14,21 +9,10 @@ in {
virtualHosts = {
"${host}" = {
extraConfig = ''
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
root * /var/lib/website
file_server
try_files {path} /index.html
encode gzip
header {
# Disable FLoC tracking
Permissions-Policy interest-cohort=()
# Enable HSTS
Strict-Transport-Security "max-age=31536000; includeSubDomains"
# Prevent MIME-type sniffing
X-Content-Type-Options nosniff
reverse_proxy ${localhost}:${toString service.ports.port0}
tls ${service.ssl.cert} ${service.ssl.key}
'';