upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-06-16 18:15:13 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: caddy test

Browse source
This commit is contained in:
Nick 2024-12-20 00:53:48 -06:00
parent 08c2bcec34
commit 7291e015fd
1 changed files with 18 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

30
nixos/modules/services/upRootNutrition.nix
View file

@ -1,5 +1,6 @@
{flake, ...}: let
inherit (flake.config.machines.devices) server;
inherit (flake.config.people.users) user0;
inherit (flake.config.services.instances) upRootNutrition web;
service = upRootNutrition;
localhost = web.localhost.address0;
@ -10,12 +11,27 @@ in {
virtualHosts = {
"${host}" = {
extraConfig = ''
root * /var/lib/website/dist/index.html
root * /var/lib/website/dist
try_files {path} /index.html
file_server
# Optional: Add security headers
header {
Strict-Transport-Security "max-age=31536000;"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "strict-origin-when-cross-origin"
}
# Your existing redirects
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port0}
# Only proxy API requests if needed
@api {
path /api/*
}
reverse_proxy @api ${localhost}:${toString service.ports.port0}
tls ${service.ssl.cert} ${service.ssl.key}
'';
@ -23,14 +39,4 @@ in {
};
};
};
fileSystems."${service.paths.path0}" = {
device = service.paths.path0;
fsType = "none";
options = ["bind"];
depends = [server.storage0.mount];
};
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
];
}