feat: wireguard test

This commit is contained in:
Nick 2025-07-01 05:14:14 -05:00
parent c0fcda71b6
commit 7a08cff855

View file

@ -46,13 +46,19 @@ in
virtualHosts = {
"${configHelpers.host}" = {
extraConfig = ''
@not_allowed not remote_ip 10.100.0.2/24
respond @not_allowed 403
@allowed_ips {
remote_ip 10.100.0.0/24
}
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
handle @allowed_ips {
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0}
}
reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0}
handle {
respond "Access Denied" 403
}
tls ${configHelpers.service.ssl.cert} ${configHelpers.service.ssl.key}
'';