🏡 my personal home lab
no logs on disk
+22
-19
+22
-19
modules/caddy.nix
+22
-19
modules/caddy.nix
···
38
38
inject headers with claims
39
39
}
40
40
'';
41
+
42
+
vhost = extraConfig: {
43
+
inherit extraConfig;
44
+
logFormat = "output discard";
45
+
};
41
46
in
42
47
{
43
48
services.caddy = {
···
58
63
${mkCaddySecurity "tasks" "tasks.goo.garden"}
59
64
}
60
65
'';
61
-
# no logs on disk
62
-
logFormat = lib.mkForce "output discard";
63
66
virtualHosts = {
64
67
"(goo_garden_cert)".extraConfig = ''
65
68
tls ${config.security.acme.certs."goo.garden".directory}/fullchain.pem ${
66
69
config.security.acme.certs."goo.garden".directory
67
70
}/key.pem
68
71
'';
69
-
"goo.garden".extraConfig = ''
72
+
"goo.garden" = vhost ''
70
73
import goo_garden_cert
71
74
72
75
handle /.well-known/matrix/server {
···
88
91
respond "hi :3"
89
92
}
90
93
'';
91
-
"*.goo.garden".extraConfig = ''
94
+
"*.goo.garden" = vhost ''
92
95
import goo_garden_cert
93
96
abort
94
97
'';
95
-
"matrix.goo.garden".extraConfig = ''
98
+
"matrix.goo.garden" = vhost ''
96
99
reverse_proxy rk1-node-1:6167
97
100
'';
98
-
"beszel.goo.garden".extraConfig = ''
101
+
"beszel.goo.garden" = vhost ''
99
102
reverse_proxy cm4-node-2:8090
100
103
'';
101
-
"id.goo.garden".extraConfig = ''
104
+
"id.goo.garden" = vhost ''
102
105
reverse_proxy localhost:1411
103
106
'';
104
-
"nas.goo.garden".extraConfig = ''
107
+
"nas.goo.garden" = vhost ''
105
108
reverse_proxy 10.0.0.2:5000
106
109
'';
107
-
"kitchen.goo.garden".extraConfig = ''
110
+
"kitchen.goo.garden" = vhost ''
108
111
reverse_proxy rk1-node-2:9080
109
112
'';
110
-
"photos.goo.garden".extraConfig = ''
113
+
"photos.goo.garden" = vhost ''
111
114
reverse_proxy rk1-node-2:2283
112
115
'';
113
-
"audiobooks.goo.garden".extraConfig = ''
116
+
"audiobooks.goo.garden" = vhost ''
114
117
reverse_proxy rk1-node-2:8000
115
118
'';
116
-
"tasks.goo.garden".extraConfig = ''
119
+
"tasks.goo.garden" = vhost ''
117
120
route /oauth2/* {
118
121
authenticate with tasks_portal
119
122
}
···
122
125
reverse_proxy cm4-node-2:8080
123
126
}
124
127
'';
125
-
"pds.goo.garden".extraConfig = ''
128
+
"pds.goo.garden" = vhost ''
126
129
reverse_proxy rk1-node-1:3000
127
130
'';
128
-
"paperless.goo.garden".extraConfig = ''
131
+
"paperless.goo.garden" = vhost ''
129
132
reverse_proxy rk1-node-1:28981
130
133
'';
131
-
"screen.goo.garden".extraConfig = ''
134
+
"screen.goo.garden" = vhost ''
132
135
reverse_proxy cm4-node-2:5050
133
136
'';
134
-
"cal.goo.garden".extraConfig = ''
137
+
"cal.goo.garden" = vhost ''
135
138
reverse_proxy cm4-node-2:4000
136
139
'';
137
-
"home.goo.garden".extraConfig = ''
140
+
"home.goo.garden" = vhost ''
138
141
reverse_proxy rk1-node-2:8123
139
142
'';
140
-
"knot.goo.garden".extraConfig = ''
143
+
"knot.goo.garden" = vhost ''
141
144
reverse_proxy rk1-node-1:5555
142
145
'';
143
-
"probe.outerwilds.space".extraConfig = ''
146
+
"probe.outerwilds.space" = vhost ''
144
147
reverse_proxy cm4-node-2:3001
145
148
'';
146
149
};