aboutsummaryrefslogtreecommitdiff
path: root/machines
diff options
context:
space:
mode:
Diffstat (limited to 'machines')
-rw-r--r--machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix14
-rw-r--r--machines/nixos/x86_64-linux/synology-vm/default.nix1
-rw-r--r--machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix7
3 files changed, 22 insertions, 0 deletions
diff --git a/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix b/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
index d426a53..c39a1ec 100644
--- a/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
+++ b/machines/nixos/x86_64-linux/do-rproxy/profiles/caddy.nix
@@ -16,6 +16,13 @@
reloadServices = [ "caddy.service" ];
credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
};
+ "go.fcuny.net" = {
+ domain = "go.fcuny.net";
+ dnsProvider = "cloudflare";
+ dnsResolver = "1.1.1.1";
+ reloadServices = [ "caddy.service" ];
+ credentialFiles.CF_DNS_API_TOKEN_FILE = config.age.secrets."cloudflare-caddy".path;
+ };
"id.fcuny.net" = {
domain = "id.fcuny.net";
dnsProvider = "cloudflare";
@@ -46,6 +53,13 @@
reverse_proxy 10.100.0.40:3000
'';
};
+ go = {
+ hostName = "go.fcuny.net";
+ useACMEHost = "go.fcuny.net";
+ extraConfig = ''
+ reverse_proxy 10.100.0.40:8070
+ '';
+ };
auth = {
hostName = "id.fcuny.net";
useACMEHost = "id.fcuny.net";
diff --git a/machines/nixos/x86_64-linux/synology-vm/default.nix b/machines/nixos/x86_64-linux/synology-vm/default.nix
index de0f5e9..9316432 100644
--- a/machines/nixos/x86_64-linux/synology-vm/default.nix
+++ b/machines/nixos/x86_64-linux/synology-vm/default.nix
@@ -30,6 +30,7 @@
"${self}/profiles/programs/fish.nix"
./profiles/forgejo.nix
./profiles/keycloak.nix
+ ./profiles/goget.nix
];
boot.loader.efi.canTouchEfiVariables = true;
diff --git a/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix b/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix
new file mode 100644
index 0000000..ac32e62
--- /dev/null
+++ b/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix
@@ -0,0 +1,7 @@
+{ ... }:
+{
+ services.goget = {
+ enable = true;
+ openFirewall = true;
+ };
+}