init

2026-07-25 23:26:39 +02:00
commit fadcad2d0b
23 changed files with 714 additions and 0 deletions
@@ -0,0 +1,85 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}: {
+  services.caddy = {
+    enable = true;
+    environmentFile = "/run/secrets/caddy.env";
+    package = pkgs.caddy.withPlugins {
+      plugins = ["github.com/caddy-dns/cloudflare@v0.2.4"];
+      hash = "sha256-7GoH8YLCoPmPExQxoga2FHB58zQDoZVf1BBwkVi0SsQ=";
+    };
+    globalConfig = ''
+      email {$EMAIL}
+      acme_dns cloudflare {$CLOUDFLARE} {
+      	resolvers 1.1.1.1:53 1.0.0.1:53
+      }
+    '';
+    # Public
+    virtualHosts = {
+      "nicknase27.com" = {
+        extraConfig = ''
+          respond "Blank" 200
+        '';
+      };
+      "nv.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy localhost:4533
+        '';
+        serverAliases = ["music.nicknase27.com"];
+      };
+      "vt.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy localhost:8222
+        '';
+        serverAliases = ["vault.nicknase27.com"];
+      };
+      "git.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy localhost:3000
+        '';
+      };
+      "jf.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy 10.0.0.5:8096
+        '';
+        serverAliases = ["watch.nicknase27.com"];
+      };
+
+      # Local
+      "opn.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy 10.0.0.1:80
+        '';
+      };
+      "ui.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy https://localhost:11443 {
+                   transport http {
+                     tls_insecure_skip_verify
+               }
+
+           }
+
+        '';
+      };
+      "storage.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy 10.0.0.5:80
+        '';
+      };
+      "photos.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy 10.0.0.5:2283
+        '';
+      };
+    };
+  };
+
+  age.secrets.caddy = {
+    file = ../../secrets/caddy.age;
+    path = "/run/secrets/caddy.env";
+  };
+}