cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

homelab tinkering 4

Browse Source
This commit is contained in:
cnst
2025-07-16 07:57:05 +02:00
parent 23e793b784
commit a1ef718b07
2 changed files with 21 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
modules/server/caddy/default.nix
View File

@@ -24,20 +24,20 @@ in {
allowedUDPPorts = ports; allowedUDPPorts = ports;
}; };
security.acme = { # security.acme = {
acceptTerms = true; # acceptTerms = true;
defaults.email = config.server.email; # defaults.email = config.server.email;
certs.${config.server.domain} = { # certs.${config.server.domain} = {
reloadServices = ["caddy.service"]; # reloadServices = ["caddy.service"];
domain = "${config.server.domain}"; # domain = "${config.server.domain}";
extraDomainNames = ["*.${config.server.domain}"]; # extraDomainNames = ["*.${config.server.domain}"];
dnsProvider = "cloudflare"; # dnsProvider = "cloudflare";
dnsResolver = "1.1.1.1:53"; # dnsResolver = "1.1.1.1:53";
dnsPropagationCheck = true; # dnsPropagationCheck = true;
group = config.services.caddy.group; # group = config.services.caddy.group;
environmentFile = config.age.secrets.cloudflare-env.path; # environmentFile = config.age.secrets.cloudflare-env.path;
}; # };
}; # };
services.caddy = { services.caddy = {
enable = true; enable = true;

19
modules/server/vaultwarden/default.nix
View File

@@ -29,14 +29,9 @@ in {
Group = "root"; Group = "root";
}; };
# services.caddy.virtualHosts."vault.cnst.dev".extraConfig = '' services.caddy.virtualHosts."vault.cnst.dev".extraConfig = ''
# encode zstd gzip reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT}
# reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} { '';
# # header_up X-Real-IP {remote_host}
# # Use this instead, if using Cloudflare's proxy
# header_up X-Real-IP {http.request.header.Cf-Connecting-Ip}
# }
# '';
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
@@ -46,12 +41,12 @@ in {
config = { config = {
DOMAIN = "https://vault.${domain}"; DOMAIN = "https://vault.${domain}";
SIGNUPS_ALLOWED = false; SIGNUPS_ALLOWED = true;
ROCKET_ADDRESS = "127.0.0.1"; ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222; ROCKET_PORT = 8222;
EXTENDED_LOGGING = true; # EXTENDED_LOGGING = true;
LOG_LEVEL = "warn"; # LOG_LEVEL = "warn";
IP_HEADER = "CF-Connecting-IP"; # IP_HEADER = "CF-Connecting-IP";
}; };
}; };
}; };