feat(IP): migrate to traefik and authentik, remove dead code

2025-09-23 18:13:28 +02:00
parent b752781064
commit 86624f362d
37 changed files with 1202 additions and 803 deletions
--- a/modules/server/www/default.nix
+++ b/modules/server/www/default.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  inherit (lib) mkOption mkEnableOption mkIf types;
+  cfg = config.server.www;
+  srv = config.server;
+in {
+  options.server.www = {
+    enable = mkEnableOption {
+      description = "Enable personal website";
+    };
+    url = mkOption {
+      default = "";
+      type = types.str;
+      description = ''
+        Public domain name to be used to access the server services via Caddy reverse proxy
+      '';
+    };
+  };
+  config = mkIf cfg.enable {
+    services.caddy.virtualHosts."${cfg.url}" = {
+      useACMEHost = cfg.url;
+      extraConfig = ''
+          handle_path /.well-known/webfinger {
+          header Content-Type application/jrd+json
+          respond `{
+            "subject": "acct:adam@${cfg.url}",
+            "links": [
+              {
+                "rel": "http://openid.net/specs/connect/1.0/issuer",
+                "href": "https://login.${cfg.url}/realms/cnix"
+              }
+            ]
+          }`
+        }
+
+        reverse_proxy http://127.0.0.1:8283
+      '';
+    };
+  };
+}