+8 -1

hosts/wolumonde/modules/headplane.nix

reviewed

··· 20 20 21 21 headscaleConfig = format.generate "headscale.yml" settings; 22 22 23 23 + domain = "plane.lan.gaze.systems"; 23 24 cfg = config.services.headplane.settings; 24 25 in 25 26 { ··· 49 50 token_endpoint_auth_method = "client_secret_post"; 50 51 headscale_api_key = ""; 51 52 disable_api_key_login = true; 52 52 - redirect_uri = "http://wolumonde:${toString cfg.server.port}/admin/oidc/callback"; 53 53 + redirect_uri = "http://${domain}/admin/oidc/callback"; 53 54 }; 54 55 }; 55 56 }; 56 57 age.secrets.headplaneSecrets.file = ../../../secrets/headplaneSecrets.age; 57 58 systemd.services.headplane.serviceConfig.EnvironmentFile = config.age.secrets.headplaneSecrets.path; 59 59 + 60 60 + services.nginx.virtualHosts.${domain} = { 61 61 + quic = true; 62 62 + locations."=/".return = "301 /admin"; 63 63 + locations."/".proxyPass = "http://localhost:${toString cfg.server.port}"; 64 64 + }; 58 65 }

+7

hosts/wolumonde/modules/headscale.nix/default.nix

reviewed

··· 29 29 "9.9.9.9" 30 30 "149.112.112.112" 31 31 ]; 32 32 + extra_records = [ 33 33 + { 34 34 + name = "plane.lan.gaze.systems"; 35 35 + type = "A"; 36 36 + value = "100.64.0.2"; 37 37 + } 38 38 + ]; 32 39 }; 33 40 oidc = { 34 41 issuer = config.services.pocket-id.settings.APP_URL;