From 5ebe53d3608e24b24273faca45ec2413dbba0640 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Thu, 24 Jul 2025 17:32:36 -0700
Subject: enable cloudflared on the vm

---
 machines/nixos/x86_64-linux/vm-synology.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'machines/nixos/x86_64-linux/vm-synology.nix')

diff --git a/machines/nixos/x86_64-linux/vm-synology.nix b/machines/nixos/x86_64-linux/vm-synology.nix
index 39c483f..eedf26e 100644
--- a/machines/nixos/x86_64-linux/vm-synology.nix
+++ b/machines/nixos/x86_64-linux/vm-synology.nix
@@ -1,5 +1,6 @@
 {
   adminUser,
+  config,
   self,
   ...
 }:
@@ -41,5 +42,19 @@
     ];
   };
 
+  services.cloudflared = {
+    enable = true;
+    certificateFile = config.age.secrets.cloudflared-cert.path;
+    tunnels = {
+      "cragmont" = {
+        credentialsFile = config.age.secrets.cloudflared-tunnel.path;
+        default = "http_status:404";
+        ingress = {
+          "git.fcuny.net".service = "ssh://127.0.0.1:22";
+        };
+      };
+    };
+  };
+
   system.stateVersion = "23.11"; # Did you read the comment?
 }
-- 
cgit v1.2.3