aboutsummaryrefslogtreecommitdiff
path: root/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-08-30 09:41:46 -0700
committerFranck Cuny <franck@fcuny.net>2025-08-30 09:44:03 -0700
commite8ab0124ddbe8ae3aaa02dca6c05cfa2d2140053 (patch)
treeeb28f31b7afb5a80e927e3a7c6d89d6b13c617b1 /machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
parentuse eza in eshell (diff)
downloadinfra-e8ab0124ddbe8ae3aaa02dca6c05cfa2d2140053.tar.gz
switch to nginx
For some reasons, I can't get compression to work with Caddy, and I don't get much benefit from it in the first place anyway.
Diffstat (limited to 'machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix')
-rw-r--r--machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix72
1 files changed, 0 insertions, 72 deletions
diff --git a/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix b/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
deleted file mode 100644
index c39a1ec..0000000
--- a/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
+++ /dev/null
@@ -1,72 +0,0 @@
-{ config, ... }:
-{
- networking.firewall.allowedTCPPorts = [
- 80
- 443
- ];
-
- security.acme = {
- acceptTerms = true;
- defaults.email = "franck@fcuny.net";
- certs = {
- "code.fcuny.net" = {
- domain = "code.fcuny.net";
- dnsProvider = "cloudflare";
- dnsResolver = "1.1.1.1";
- reloadServices = [ "caddy.service" ];
- credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
- };
- "go.fcuny.net" = {
- domain = "go.fcuny.net";
- dnsProvider = "cloudflare";
- dnsResolver = "1.1.1.1";
- reloadServices = [ "caddy.service" ];
- credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
- };
- "id.fcuny.net" = {
- domain = "id.fcuny.net";
- dnsProvider = "cloudflare";
- dnsResolver = "1.1.1.1";
- reloadServices = [ "caddy.service" ];
- credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
- };
- };
- };
-
- services.caddy = {
- enable = true;
- email = "franck@fcuny.net";
- globalConfig = ''
- metrics {
- per_host
- }
- admin :2019 {
- origins 127.0.0.1 10.100.0.0/24
- }
- '';
- virtualHosts = {
- forgejo = {
- hostName = "code.fcuny.net";
- useACMEHost = "code.fcuny.net";
- extraConfig = ''
- respond /metrics 403
- reverse_proxy 10.100.0.40:3000
- '';
- };
- go = {
- hostName = "go.fcuny.net";
- useACMEHost = "go.fcuny.net";
- extraConfig = ''
- reverse_proxy 10.100.0.40:8070
- '';
- };
- auth = {
- hostName = "id.fcuny.net";
- useACMEHost = "id.fcuny.net";
- extraConfig = ''
- reverse_proxy 10.100.0.40:8080
- '';
- };
- };
- };
-}