cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

homelab tinkering 4

Browse Source
This commit is contained in:
cnst
2025-07-16 07:57:05 +02:00
parent 23e793b784
commit a1ef718b07
2 changed files with 21 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
modules/server/caddy/default.nix
View File

@@ -24,20 +24,20 @@ in {
allowedUDPPorts = ports;
};
security.acme = {
acceptTerms = true;
defaults.email = config.server.email;
certs.${config.server.domain} = {
reloadServices = ["caddy.service"];
domain = "${config.server.domain}";
extraDomainNames = ["*.${config.server.domain}"];
dnsProvider = "cloudflare";
dnsResolver = "1.1.1.1:53";
dnsPropagationCheck = true;
group = config.services.caddy.group;
environmentFile = config.age.secrets.cloudflare-env.path;
};
};
# security.acme = {
# acceptTerms = true;
# defaults.email = config.server.email;
# certs.${config.server.domain} = {
# reloadServices = ["caddy.service"];
# domain = "${config.server.domain}";
# extraDomainNames = ["*.${config.server.domain}"];
# dnsProvider = "cloudflare";
# dnsResolver = "1.1.1.1:53";
# dnsPropagationCheck = true;
# group = config.services.caddy.group;
# environmentFile = config.age.secrets.cloudflare-env.path;
# };
# };
services.caddy = {
enable = true;

19
modules/server/vaultwarden/default.nix
View File

@@ -29,14 +29,9 @@ in {
Group = "root";
};
# services.caddy.virtualHosts."vault.cnst.dev".extraConfig = ''
# encode zstd gzip
# reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} {
# # header_up X-Real-IP {remote_host}
# # Use this instead, if using Cloudflare's proxy
# header_up X-Real-IP {http.request.header.Cf-Connecting-Ip}
# }
# '';
services.caddy.virtualHosts."vault.cnst.dev".extraConfig = ''
reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT}
'';
services.vaultwarden = {
enable = true;
@@ -46,12 +41,12 @@ in {
config = {
DOMAIN = "https://vault.${domain}";
SIGNUPS_ALLOWED = false;
SIGNUPS_ALLOWED = true;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
EXTENDED_LOGGING = true;
LOG_LEVEL = "warn";
IP_HEADER = "CF-Connecting-IP";
# EXTENDED_LOGGING = true;
# LOG_LEVEL = "warn";
# IP_HEADER = "CF-Connecting-IP";
};
};
};